CVE

Id
45783  
CVE No.
CVE-2010-3199  
Status
Candidate  
Description
Untrusted search path vulnerability in TortoiseSVN 1.6.10, Build 19898 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Tortoise. NOTE: this is only a vulnerability when a file extension is associated with TortoiseProc or TortoiseMerge, which is not the default.  
Phase
Assigned (20100831)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
498542 45783 CVE-2010-3199 BUGTRAQ:20100831 Tortoise SVN DLL Hijacking Vulnerability  View
498543 45783 CVE-2010-3199 URL:http://www.securityfocus.com/archive/1/archive/1/513442/100/0/threaded  View
498544 45783 CVE-2010-3199 BUGTRAQ:20100901 Tortoise SVN DLL Hijacking Vulnerability  View
498545 45783 CVE-2010-3199 URL:http://www.securityfocus.com/archive/1/archive/1/513463/100/0/threaded  View
498546 45783 CVE-2010-3199 MISC:http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=2653163  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39858 JVNDB-2010-005643 Joomla! 用の PicSell コンポーネントにおけるディレクトリトラバーサルの脆弱性 Joomla! 用の PicSell (com_picsell) コンポーネントには、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2010-3203 45783 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005643.html  View