PT-2010-4570 · Teammate · Teammate Audit Management Software Suite

Beenu Arora · Publicado 2010-08-26 · Atualizado 2010-08-26 · CVE-2010-3125

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TeamMate Audit Management Software Suite version 8.0 patch 2

Description The issue allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks. This can be achieved via a Trojan horse mfc71enu.dll that is located in the same folder as a .tmx file.

Recommendations For TeamMate Audit Management Software Suite version 8.0 patch 2, consider restricting access to the mfc71enu.dll file to minimize the risk of exploitation. Additionally, avoid using untrusted search paths until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Identificadores relacionados

CVE-2010-3125

Produtos afetados

Teammate Audit Management Software Suite

Referências · 3

• 🔥 https://exploit-db.com/exploits/14747 · Exploit
• 🔥 http://exploit-db.com/exploits/14747 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-3125 · Nota de Segurança