PT-2010-4570 · Teammate · Teammate Audit Management Software Suite

Beenu Arora · Published 2010-08-26 · Updated 2010-08-26 · CVE-2010-3125

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TeamMate Audit Management Software Suite version 8.0 patch 2

Description The issue allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks. This can be achieved via a Trojan horse mfc71enu.dll that is located in the same folder as a .tmx file.

Recommendations For TeamMate Audit Management Software Suite version 8.0 patch 2, consider restricting access to the mfc71enu.dll file to minimize the risk of exploitation. Additionally, avoid using untrusted search paths until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2010-3125

Affected Products

Teammate Audit Management Software Suite

References · 3

• 🔥 https://exploit-db.com/exploits/14747 · Exploit
• 🔥 http://exploit-db.com/exploits/14747 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-3125 · Security Note