CVE

Id
45986  
CVE No.
CVE-2010-3402  
Status
Candidate  
Description
Untrusted search path vulnerability in IDM Computer Solutions UltraEdit 16.20.0.1009, 16.10.0.1036, and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a bin, cpp, css, c, dat, hpp, html, h, ini, java, log, mak, php, prj, txt, or xml file.  
Phase
Assigned (20100916)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
499928 45986 CVE-2010-3402 FULLDISC:20100912 UltraEdit Text Editor version 16.10.0.1036 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)  View
499929 45986 CVE-2010-3402 URL:http://archives.neohapsis.com/archives/fulldisclosure/2010-09/0227.html  View
499930 45986 CVE-2010-3402 BID:43183  View
499931 45986 CVE-2010-3402 URL:http://www.securityfocus.com/bid/43183  View
499932 45986 CVE-2010-3402 OSVDB:67995  View
499933 45986 CVE-2010-3402 URL:http://osvdb.org/67995  View
499934 45986 CVE-2010-3402 SECUNIA:41403  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36311 JVNDB-2010-002091 IBM AIX の sa_snap におけるファイルを削除される脆弱性 IBM AIX の bos.esagent ファイルセット内にある sa_snap には、システムグループのメンバーシップを利用され、ファイルを削除される脆弱性が存在します。 CVE-2010-3406 45986 1.7 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002091.html  View