PT-2012-1419 · Kingsoft · Kingsoft Office

Aung Khant · Publicado 2012-09-06 · Atualizado 2012-09-06 · CVE-2010-5208

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Kingsoft Office 2010 version 6.6.0.2477

Description The issue concerns untrusted search path vulnerabilities in multiple components of Kingsoft Office 2010, including Presentation, Writer, and Spreadsheets. This allows local users to gain privileges by placing a Trojan horse plgpf.dll file in the current working directory, potentially exploiting the vulnerability when the directory contains specific file types such as .xls, .ppt, .rtf, or .doc.

Recommendations For Kingsoft Office 2010 version 6.6.0.2477, consider removing or restricting access to the plgpf.dll file in the current working directory to minimize the risk of exploitation. Additionally, avoid opening files from untrusted sources, especially in directories that may contain malicious plgpf.dll files, until a patch or fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2010-5208

Produtos afetados

Kingsoft Office

Referências · 3

• http://secunia.com/advisories/41406 · Aviso do Fabricante
• http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Bkingsoft_office%5D_2010_insecure_dll_hijacking · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-5208 · Nota de Segurança