PT-2012-5618 · Unknown · Xtreme Rat

Publicado 2012-09-06 · Atualizado 2017-08-29 · CVE-2012-4866

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Xtreme RAT version 3.5

Description The issue allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll located in the same folder as the current working directory.

Recommendations For Xtreme RAT version 3.5, consider restricting access to the current working directory to minimize the risk of exploitation, and avoid using untrusted search paths until a fix is available.

Exploit

Correção

Identificadores relacionados

CVE-2012-4866

Produtos afetados

Xtreme Rat

Referências · 4

• 🔥 http://securityfocus.com/bid/52542 · Exploit
• 🔥 http://packetstormsecurity.org/files/110949/Xtreme-RAT-DLL-Hijack.html · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74151 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-4866 · Nota de Segurança