PT-2012-1440 · Bentley Systems+1 · Mptools.Dll+4

Published 2012-09-07 · Updated 2012-09-11 · CVE-2010-5230

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MicroStation version 7.1

Description The issue allows local users to gain privileges via a Trojan horse file in the current working directory. This can be achieved by placing a malicious (1) mptools.dll, (2) baseman.dll, (3) wintab32.dll, or (4) wintab.dll file in a directory that contains a .hln or .rdl file.

Recommendations For MicroStation version 7.1, consider restricting access to the current working directory to prevent malicious files from being placed there, and avoid using untrusted search paths to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2010-5230

Affected Products

Microstation

Baseman.Dll

Mptools.Dll

Wintab.Dll

Wintab32.Dll

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2010-5230 · Security Note
• http://secunia.com/advisories/41106 · Vendor Advisory
• http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0320.html · Note