PT-2005-2183 · Musicmatch · Musicmatch

Robert Fly · Publicado 2005-04-18 · Atualizado 2016-10-18 · CVE-2005-1167

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Musicmatch versions 10.00.2047 and earlier

Description The issue allows local users to potentially obtain sensitive information because log files are stored in the Program Files directory instead of the user profile.

Recommendations For Musicmatch versions 10.00.2047 and earlier, consider changing the log file storage location to the user profile directory to minimize the risk of sensitive information disclosure.

Correção

Identificadores relacionados

CVE-2005-1167

Produtos afetados

Musicmatch

Referências · 3

• http://hyperdose.com/advisories/H2005-02.txt · Nota
• http://marc.info/?l=bugtraq&m=111358261404682&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1167 · Nota de Segurança