9.3

CVE-2010-3199

Untrusted search path vulnerability in TortoiseSVN 1.6.10, Build 19898 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Tortoise.  NOTE: this is only a vulnerability when a file extension is associated with TortoiseProc or TortoiseMerge, which is not the default.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tigris ≫ Tortoisesvn Version <= 1.6.10
Tigris ≫ Tortoisesvn Version 0.1
Tigris ≫ Tortoisesvn Version 0.2
Tigris ≫ Tortoisesvn Version 0.3
Tigris ≫ Tortoisesvn Version 0.4
Tigris ≫ Tortoisesvn Version 0.5
Tigris ≫ Tortoisesvn Version 0.5.1
Tigris ≫ Tortoisesvn Version 0.6
Tigris ≫ Tortoisesvn Version 0.6.1
Tigris ≫ Tortoisesvn Version 0.7
Tigris ≫ Tortoisesvn Version 0.8
Tigris ≫ Tortoisesvn Version 0.8.1
Tigris ≫ Tortoisesvn Version 0.9.1
Tigris ≫ Tortoisesvn Version 0.9.2
Tigris ≫ Tortoisesvn Version 0.10.0
Tigris ≫ Tortoisesvn Version 0.11.0
Tigris ≫ Tortoisesvn Version 0.11.2
Tigris ≫ Tortoisesvn Version 0.12
Tigris ≫ Tortoisesvn Version 0.12.1
Tigris ≫ Tortoisesvn Version 0.14
Tigris ≫ Tortoisesvn Version 0.15
Tigris ≫ Tortoisesvn Version 0.15.1
Tigris ≫ Tortoisesvn Version 0.15.2
Tigris ≫ Tortoisesvn Version 0.16
Tigris ≫ Tortoisesvn Version 0.17
Tigris ≫ Tortoisesvn Version 0.18
Tigris ≫ Tortoisesvn Version 0.19
Tigris ≫ Tortoisesvn Version 0.20
Tigris ≫ Tortoisesvn Version 0.20.1
Tigris ≫ Tortoisesvn Version 0.20.2
Tigris ≫ Tortoisesvn Version 0.21
Tigris ≫ Tortoisesvn Version 0.22
Tigris ≫ Tortoisesvn Version 0.23
Tigris ≫ Tortoisesvn Version 0.24
Tigris ≫ Tortoisesvn Version 0.25
Tigris ≫ Tortoisesvn Version 0.26
Tigris ≫ Tortoisesvn Version 1.0
Tigris ≫ Tortoisesvn Version 1.0.1
Tigris ≫ Tortoisesvn Version 1.0.2
Tigris ≫ Tortoisesvn Version 1.0.3
Tigris ≫ Tortoisesvn Version 1.0.4
Tigris ≫ Tortoisesvn Version 1.0.5
Tigris ≫ Tortoisesvn Version 1.0.6
Tigris ≫ Tortoisesvn Version 1.0.7
Tigris ≫ Tortoisesvn Version 1.0.8
Tigris ≫ Tortoisesvn Version 1.1.0
Tigris ≫ Tortoisesvn Version 1.1.0 Update rc1
Tigris ≫ Tortoisesvn Version 1.1.0 Update rc2
Tigris ≫ Tortoisesvn Version 1.1.1
Tigris ≫ Tortoisesvn Version 1.1.2
Tigris ≫ Tortoisesvn Version 1.1.3
Tigris ≫ Tortoisesvn Version 1.1.4
Tigris ≫ Tortoisesvn Version 1.1.5
Tigris ≫ Tortoisesvn Version 1.1.6
Tigris ≫ Tortoisesvn Version 1.1.7
Tigris ≫ Tortoisesvn Version 1.2.0
Tigris ≫ Tortoisesvn Version 1.2.1
Tigris ≫ Tortoisesvn Version 1.2.2
Tigris ≫ Tortoisesvn Version 1.2.3
Tigris ≫ Tortoisesvn Version 1.2.4
Tigris ≫ Tortoisesvn Version 1.2.5
Tigris ≫ Tortoisesvn Version 1.2.6
Tigris ≫ Tortoisesvn Version 1.3.0
Tigris ≫ Tortoisesvn Version 1.3.1
Tigris ≫ Tortoisesvn Version 1.3.2
Tigris ≫ Tortoisesvn Version 1.3.3
Tigris ≫ Tortoisesvn Version 1.3.4
Tigris ≫ Tortoisesvn Version 1.3.5
Tigris ≫ Tortoisesvn Version 1.4.0
Tigris ≫ Tortoisesvn Version 1.4.0 Update rc1
Tigris ≫ Tortoisesvn Version 1.4.1
Tigris ≫ Tortoisesvn Version 1.4.2
Tigris ≫ Tortoisesvn Version 1.4.3
Tigris ≫ Tortoisesvn Version 1.4.4
Tigris ≫ Tortoisesvn Version 1.4.5
Tigris ≫ Tortoisesvn Version 1.4.6
Tigris ≫ Tortoisesvn Version 1.4.7
Tigris ≫ Tortoisesvn Version 1.4.8
Tigris ≫ Tortoisesvn Version 1.5.0
Tigris ≫ Tortoisesvn Version 1.5.0 Update alpha1
Tigris ≫ Tortoisesvn Version 1.5.0 Update beta1
Tigris ≫ Tortoisesvn Version 1.5.0 Update rc1
Tigris ≫ Tortoisesvn Version 1.5.0 Update rc2
Tigris ≫ Tortoisesvn Version 1.5.0 Update rc3
Tigris ≫ Tortoisesvn Version 1.5.1
Tigris ≫ Tortoisesvn Version 1.5.2
Tigris ≫ Tortoisesvn Version 1.5.3
Tigris ≫ Tortoisesvn Version 1.5.4
Tigris ≫ Tortoisesvn Version 1.5.5
Tigris ≫ Tortoisesvn Version 1.5.6
Tigris ≫ Tortoisesvn Version 1.5.7
Tigris ≫ Tortoisesvn Version 1.5.8
Tigris ≫ Tortoisesvn Version 1.5.9
Tigris ≫ Tortoisesvn Version 1.5.10
Tigris ≫ Tortoisesvn Version 1.6.0
Tigris ≫ Tortoisesvn Version 1.6.3
Tigris ≫ Tortoisesvn Version 1.6.4
Tigris ≫ Tortoisesvn Version 1.6.5
Tigris ≫ Tortoisesvn Version 1.6.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.2% 0.898
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=2653163
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=2653202&orderBy=createDate&orderType=desc
http://www.securityfocus.com/archive/1/513442/100/0/threaded
http://www.securityfocus.com/archive/1/513463/100/0/threaded