PT-2012-5577 · Mindjet · Mindmanager

Published 2012-09-06 · Updated 2012-09-06 · CVE-2012-4754

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions MindManager 2012 version 10.0.493

Description The issue allows local users to gain privileges via a Trojan horse ssgp.dll or dwmapi.dll file in the current working directory. This can be demonstrated by a directory that contains a .mmap file.

Recommendations For MindManager 2012 version 10.0.493, consider restricting access to the ssgp.dll and dwmapi.dll files to minimize the risk of exploitation. As a temporary workaround, avoid using directories that contain .mmap files until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2012-4754

Affected Products

Mindmanager

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-4754 · Security Note
• http://secunia.com/advisories/47797 · Vendor Advisory
• http://zeroscience.mk/en/vulnerabilities/ZSL-2012-5068.php · Note