PT-2010-4602 · Microsoft · Windows Explorer

Xacrett · Publicado 2010-10-19 · Atualizado 2010-10-28 · CVE-2010-3157

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions XacRett versions prior to 50

Description The issue allows attackers to execute arbitrary code via a Trojan horse executable file. This is related to the explorer.exe filename and the use of Windows Explorer.

Recommendations For versions prior to 50, update to version 50 or later to resolve the issue. As a temporary workaround, consider restricting the execution of files from untrusted search paths to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2010-3157

Produtos afetados

Windows Explorer

Referências · 6

• http://secunia.com/advisories/41850 · Aviso do Fabricante
• http://securityfocus.com/bid/44125 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-3157 · Nota de Segurança
• http://jvn.jp/jp/JVN04665167/index.html · Nota
• http://kmonos.net/lib/info/xacr49-vul.ja.html · Nota
• http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000040.html · Nota