9.3

CVE-2010-3199

Untrusted search path vulnerability in TortoiseSVN 1.6.10, Build 19898 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Tortoise.  NOTE: this is only a vulnerability when a file extension is associated with TortoiseProc or TortoiseMerge, which is not the default.

Data is provided by the National Vulnerability Database (NVD)
Tigris ≫ Tortoisesvn Version <= 1.6.10
Tigris ≫ Tortoisesvn Version0.1
Tigris ≫ Tortoisesvn Version0.2
Tigris ≫ Tortoisesvn Version0.3
Tigris ≫ Tortoisesvn Version0.4
Tigris ≫ Tortoisesvn Version0.5
Tigris ≫ Tortoisesvn Version0.5.1
Tigris ≫ Tortoisesvn Version0.6
Tigris ≫ Tortoisesvn Version0.6.1
Tigris ≫ Tortoisesvn Version0.7
Tigris ≫ Tortoisesvn Version0.8
Tigris ≫ Tortoisesvn Version0.8.1
Tigris ≫ Tortoisesvn Version0.9.1
Tigris ≫ Tortoisesvn Version0.9.2
Tigris ≫ Tortoisesvn Version0.10.0
Tigris ≫ Tortoisesvn Version0.11.0
Tigris ≫ Tortoisesvn Version0.11.2
Tigris ≫ Tortoisesvn Version0.12
Tigris ≫ Tortoisesvn Version0.12.1
Tigris ≫ Tortoisesvn Version0.14
Tigris ≫ Tortoisesvn Version0.15
Tigris ≫ Tortoisesvn Version0.15.1
Tigris ≫ Tortoisesvn Version0.15.2
Tigris ≫ Tortoisesvn Version0.16
Tigris ≫ Tortoisesvn Version0.17
Tigris ≫ Tortoisesvn Version0.18
Tigris ≫ Tortoisesvn Version0.19
Tigris ≫ Tortoisesvn Version0.20
Tigris ≫ Tortoisesvn Version0.20.1
Tigris ≫ Tortoisesvn Version0.20.2
Tigris ≫ Tortoisesvn Version0.21
Tigris ≫ Tortoisesvn Version0.22
Tigris ≫ Tortoisesvn Version0.23
Tigris ≫ Tortoisesvn Version0.24
Tigris ≫ Tortoisesvn Version0.25
Tigris ≫ Tortoisesvn Version0.26
Tigris ≫ Tortoisesvn Version1.0
Tigris ≫ Tortoisesvn Version1.0.1
Tigris ≫ Tortoisesvn Version1.0.2
Tigris ≫ Tortoisesvn Version1.0.3
Tigris ≫ Tortoisesvn Version1.0.4
Tigris ≫ Tortoisesvn Version1.0.5
Tigris ≫ Tortoisesvn Version1.0.6
Tigris ≫ Tortoisesvn Version1.0.7
Tigris ≫ Tortoisesvn Version1.0.8
Tigris ≫ Tortoisesvn Version1.1.0
Tigris ≫ Tortoisesvn Version1.1.0 Updaterc1
Tigris ≫ Tortoisesvn Version1.1.0 Updaterc2
Tigris ≫ Tortoisesvn Version1.1.1
Tigris ≫ Tortoisesvn Version1.1.2
Tigris ≫ Tortoisesvn Version1.1.3
Tigris ≫ Tortoisesvn Version1.1.4
Tigris ≫ Tortoisesvn Version1.1.5
Tigris ≫ Tortoisesvn Version1.1.6
Tigris ≫ Tortoisesvn Version1.1.7
Tigris ≫ Tortoisesvn Version1.2.0
Tigris ≫ Tortoisesvn Version1.2.1
Tigris ≫ Tortoisesvn Version1.2.2
Tigris ≫ Tortoisesvn Version1.2.3
Tigris ≫ Tortoisesvn Version1.2.4
Tigris ≫ Tortoisesvn Version1.2.5
Tigris ≫ Tortoisesvn Version1.2.6
Tigris ≫ Tortoisesvn Version1.3.0
Tigris ≫ Tortoisesvn Version1.3.1
Tigris ≫ Tortoisesvn Version1.3.2
Tigris ≫ Tortoisesvn Version1.3.3
Tigris ≫ Tortoisesvn Version1.3.4
Tigris ≫ Tortoisesvn Version1.3.5
Tigris ≫ Tortoisesvn Version1.4.0
Tigris ≫ Tortoisesvn Version1.4.0 Updaterc1
Tigris ≫ Tortoisesvn Version1.4.1
Tigris ≫ Tortoisesvn Version1.4.2
Tigris ≫ Tortoisesvn Version1.4.3
Tigris ≫ Tortoisesvn Version1.4.4
Tigris ≫ Tortoisesvn Version1.4.5
Tigris ≫ Tortoisesvn Version1.4.6
Tigris ≫ Tortoisesvn Version1.4.7
Tigris ≫ Tortoisesvn Version1.4.8
Tigris ≫ Tortoisesvn Version1.5.0
Tigris ≫ Tortoisesvn Version1.5.0 Updatealpha1
Tigris ≫ Tortoisesvn Version1.5.0 Updatebeta1
Tigris ≫ Tortoisesvn Version1.5.0 Updaterc1
Tigris ≫ Tortoisesvn Version1.5.0 Updaterc2
Tigris ≫ Tortoisesvn Version1.5.0 Updaterc3
Tigris ≫ Tortoisesvn Version1.5.1
Tigris ≫ Tortoisesvn Version1.5.2
Tigris ≫ Tortoisesvn Version1.5.3
Tigris ≫ Tortoisesvn Version1.5.4
Tigris ≫ Tortoisesvn Version1.5.5
Tigris ≫ Tortoisesvn Version1.5.6
Tigris ≫ Tortoisesvn Version1.5.7
Tigris ≫ Tortoisesvn Version1.5.8
Tigris ≫ Tortoisesvn Version1.5.9
Tigris ≫ Tortoisesvn Version1.5.10
Tigris ≫ Tortoisesvn Version1.6.0
Tigris ≫ Tortoisesvn Version1.6.3
Tigris ≫ Tortoisesvn Version1.6.4
Tigris ≫ Tortoisesvn Version1.6.5
Tigris ≫ Tortoisesvn Version1.6.6
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 2.72% 0.846
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C