PT-2011-4580 · Plotsoft · Pdfill Pdf Editor

Publicado 2011-09-27 · Atualizado 2012-02-21 · CVE-2011-3690

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PlotSoft PDFill PDF Editor version 8.0

Description The issue allows local users to gain privileges through an untrusted search path vulnerability. This can be achieved by placing a Trojan horse mfc70enu.dll or mfc80loc.dll in the current working directory.

Recommendations For PlotSoft PDFill PDF Editor version 8.0, consider removing or restricting access to the vulnerable dynamic link libraries mfc70enu.dll and mfc80loc.dll to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2011-3690

Produtos afetados

Pdfill Pdf Editor

Referências · 2

• http://solutionary.com/index/SERT/Vuln-Disclosures/PDFill-Insecure-Library.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-3690 · Nota de Segurança