PT-2012-1472 · Gromada · Gromada Multimedia Conversion Library

Published 2012-09-07 · Updated 2012-09-07 · CVE-2010-5262

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Gromada Multimedia Conversion Library version 5.4.0

Description The issue allows local users to gain privileges via a Trojan horse file, specifically libgif-1.1.0.dll or libhav-1.0.1.dll, in the current working directory due to multiple untrusted search path vulnerabilities in libmcl-5.4.0.dll.

Recommendations For Gromada Multimedia Conversion Library version 5.4.0, consider restricting access to the libmcl-5.4.0.dll to minimize the risk of exploitation. Avoid using the library in environments where untrusted files may be present in the current working directory until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2010-5262

Affected Products

Gromada Multimedia Conversion Library

References · 2

• http://secunia.com/advisories/41571 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-5262 · Security Note