CVE

Id
39178  
CVE No.
CVE-2009-1743  
Status
Candidate  
Description
Directory traversal vulnerability in InstallHFZ.exe 6.5.201.0 in Pinnacle Hollywood Effects 6, a module in Pinnacle Systems Pinnacle Studio 12, allows remote attackers to create and overwrite arbitrary files via a filename containing a .. (dot dot backslash) sequence in a Hollywood FX Compressed Archive (.hfz) file. NOTE: this can be leveraged for code execution by decompressing a file to a Startup folder. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20090520)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
430862 39178 CVE-2009-1743 BUGTRAQ:20090513 Pinnacle Studio 12 "Hollywood FX Compressed Archive" (.hfz) directory traversal vulnerability poc  View
430863 39178 CVE-2009-1743 URL:http://www.securityfocus.com/archive/1/archive/1/503476/100/0/threaded  View
430864 39178 CVE-2009-1743 MILW0RM:8670  View
430865 39178 CVE-2009-1743 URL:http://www.milw0rm.com/exploits/8670  View
430866 39178 CVE-2009-1743 MISC:http://retrogod.altervista.org/9sg_pinnacle_studio_12_hfz.htm  View
430867 39178 CVE-2009-1743 BID:34936  View
430868 39178 CVE-2009-1743 URL:http://www.securityfocus.com/bid/34936  View
430869 39178 CVE-2009-1743 OSVDB:54430  View
430870 39178 CVE-2009-1743 URL:http://osvdb.org/54430  View
430871 39178 CVE-2009-1743 SECUNIA:35078  View
430872 39178 CVE-2009-1743 URL:http://secunia.com/advisories/35078  View
430873 39178 CVE-2009-1743 XF:pinnaclestudio-hfz-directory-traversal(50510)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42429 JVNDB-2009-003436 26th Avenue bSpeak の index.php における SQL インジェクションの脆弱性 26th Avenue bSpeak の index.php には、SQL インジェクションの脆弱性が存在します。 CVE-2009-1747 39178 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003436.html  View