PT-2012-1409 · Isao Maruoka · Pixia

Published 2012-09-06 · Updated 2012-09-11 · CVE-2010-5197

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Pixia version 4.70j

Description The issue allows local users to gain privileges through an untrusted search path vulnerability. This can be exploited by placing a Trojan horse wintab32.dll file in the current working directory, particularly in a directory containing a .pxa file.

Recommendations For Pixia version 4.70j, consider restricting access to the wintab32.dll file or avoiding the use of untrusted directories to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2010-5197

Affected Products

Pixia

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2010-5197 · Security Note
• http://secunia.com/advisories/41176 · Vendor Advisory
• http://corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list · Note