6.9

CVE-2010-5208

EPSS 0.35%
Veröffentlicht 06.09.2012 10:41:55
Zuletzt bearbeitet 16.06.2026 23:26:20
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Multiple untrusted search path vulnerabilities in the (1) Presentation, (2) Writer, and (3) Spreadsheets components in Kingsoft Office 2010 6.6.0.2477 allow local users to gain privileges via a Trojan horse plgpf.dll file in the current working directory, as demonstrated by a directory that contains a .xls, .ppt, .rtf, or .doc file.  NOTE: some of these details are obtained from third party information.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 5

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ksoffice ≫ Office 2010 Version6.6.0.2477

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.35%	0.263

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.9	3.4	10	AV:L/AC:M/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Bkingsoft_office%5D_2010_insecure_dll_hijacking

http://secunia.com/advisories/41406

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2010-5208

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-5208

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-5208

EUVD