PT-2010-5202 · Microsoft · Windows Movie Maker

CVE-2010-3967 · Publicado 2010-12-16 · Atualizado 2023-12-07

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Movie Maker version 2.6

Description The issue is related to an untrusted search path vulnerability, which allows local users to gain privileges. This can be achieved by placing a Trojan horse DLL in the current working directory, particularly in a directory containing a Movie Maker (MSWMM) file.

Recommendations For Microsoft Windows Movie Maker version 2.6, consider restricting access to the current working directory to minimize the risk of exploitation until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2010-3967

Produtos afetados

Windows Movie Maker

Referências · 8

• 🔥 https://exploit-db.com/exploits/14731 · Exploit
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12250 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-3967 · Nota de Segurança
• http://securitytracker.com/id?1024875 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-093 · Aviso do Fabricante
• http://secunia.com/advisories/42607 · Aviso do Fabricante
• http://vupen.com/english/advisories/2010/3216 · Aviso do Fabricante
• http://us-cert.gov/cas/techalerts/TA10-348A.html · Nota