PT-2010-4580 · Cisco · Cisco Packet Tracer

Ccna · Publicado 2010-08-26 · Atualizado 2017-08-17 · CVE-2010-3135

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Packet Tracer version 5.2

Description The issue allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks. This is achieved via a Trojan horse wintab32.dll that is located in the same folder as a .pkt or .pkz file.

Recommendations For Cisco Packet Tracer version 5.2, consider removing or restricting access to the wintab32.dll file to minimize the risk of exploitation. Additionally, avoid using untrusted search paths to prevent DLL hijacking attacks.

Exploit

Correção

Identificadores relacionados

CVE-2010-3135

Produtos afetados

Cisco Packet Tracer

Referências · 4

• 🔥 http://exploit-db.com/exploits/14774 · Exploit
• 🔥 https://exploit-db.com/exploits/14774 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64483 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-3135 · Nota de Segurança