PT-2012-5577 · Mindjet · Mindmanager

Publicado 2012-09-06 · Atualizado 2012-09-06 · CVE-2012-4754

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions MindManager 2012 version 10.0.493

Description The issue allows local users to gain privileges via a Trojan horse ssgp.dll or dwmapi.dll file in the current working directory. This can be demonstrated by a directory that contains a .mmap file.

Recommendations For MindManager 2012 version 10.0.493, consider restricting access to the ssgp.dll and dwmapi.dll files to minimize the risk of exploitation. As a temporary workaround, avoid using directories that contain .mmap files until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2012-4754

Produtos afetados

Mindmanager

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-4754 · Nota de Segurança
• http://zeroscience.mk/en/vulnerabilities/ZSL-2012-5068.php · Nota
• http://secunia.com/advisories/47797 · Aviso do Fabricante