PT-2010-4638 · Tortoisesvn · Tortoisesvn

Publicado 2010-09-10 · Atualizado 2018-10-10 · CVE-2010-3199

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TortoiseSVN versions 1.6.10 and earlier

Description The issue allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll. This occurs when a file extension is associated with TortoiseProc or TortoiseMerge, which is not the default. The vulnerability is caused by the application loading libraries in an insecure manner, allowing the loading of arbitrary libraries by tricking a user into opening a file associated with TortoiseProc or TortoiseMerge located on a remote WebDAV or SMB share. Successful exploitation requires that files are opened in TortoiseProc or TortoiseMerge, which is not a default setting.

Recommendations For TortoiseSVN versions 1.6.10 and earlier, consider disabling the file associations with TortoiseProc or TortoiseMerge until a patch is available. Restrict access to the vulnerable libraries, such as dwmapi.dll, to minimize the risk of exploitation. Avoid opening files associated with TortoiseProc or TortoiseMerge from remote WebDAV or SMB shares.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-3199

Produtos afetados

Tortoisesvn

Referências · 5

• http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=2653163 · Nota
• http://securityfocus.com/archive/1/513463/100/0/threaded · Nota
• http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=2653202&orderBy=createDate&orderType=desc · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-3199 · Nota de Segurança
• http://securityfocus.com/archive/1/513442/100/0/threaded · Nota