CVE-2015-3999

Published: May 20, 2015Modified: May 6, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Piriform CCleaner 3.26.0.1988 through 5.02.5101 writes the filenames to disk when overwriting files, which allows local users to obtain sensitive information by searching unallocated disk space.

Affected (26)

Products: Piriform: Ccleaner

Piriform

1 product

Ccleaner

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Piriform Ccleaner	Version 3.26.1888
Piriform Ccleaner	Version 3.27.1900
Piriform Ccleaner	Version 3.28.1913
Piriform Ccleaner	Version 4.00.4064
Piriform Ccleaner	Version 4.01.4093
Piriform Ccleaner	Version 4.02.4115
Piriform Ccleaner	Version 4.03.4151
Piriform Ccleaner	Version 4.04.4197
Piriform Ccleaner	Version 4.05.4250
Piriform Ccleaner	Version 4.06.4324
Piriform Ccleaner	Version 4.07.4369
Piriform Ccleaner	Version 4.08.4428
Piriform Ccleaner	Version 4.09.4471
Piriform Ccleaner	Version 4.10.4570
Piriform Ccleaner	Version 4.11.4619
Piriform Ccleaner	Version 4.12.4657
Piriform Ccleaner	Version 4.13.4693
Piriform Ccleaner	Version 4.14.4707
Piriform Ccleaner	Version 4.15.4725
Piriform Ccleaner	Version 4.16.4763
Piriform Ccleaner	Version 4.17.4808
Piriform Ccleaner	Version 4.18.4844
Piriform Ccleaner	Version 4.19.4867
Piriform Ccleaner	Version 5.00.5050
Piriform Ccleaner	Version 5.01.5075
Piriform Ccleaner	Version 5.02.5101

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

http://seclists.org/fulldisclosure/2015/May/72

Source: cve@mitre.org

http://www.securityfocus.com/bid/74714

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2015/May/72

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/74714

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.