CVE

Id
53252  
CVE No.
CVE-2012-0009  
Status
Candidate  
Description
Untrusted search path vulnerability in the Windows Object Packager configuration in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse executable file in the current working directory, as demonstrated by a directory that contains a file with an embedded packaged object, aka "Object Packager Insecure Executable Launching Vulnerability."  
Phase
Assigned (20111109)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
562706 53252 CVE-2012-0009 MS:MS12-002  View
562707 53252 CVE-2012-0009 URL:http://technet.microsoft.com/security/bulletin/MS12-002  View
562708 53252 CVE-2012-0009 CERT:TA12-010A  View
562709 53252 CVE-2012-0009 URL:http://www.us-cert.gov/cas/techalerts/TA12-010A.html  View
562710 53252 CVE-2012-0009 BID:51297  View
562711 53252 CVE-2012-0009 URL:http://www.securityfocus.com/bid/51297  View
562712 53252 CVE-2012-0009 OVAL:oval:org.mitre.oval:def:14393  View
562713 53252 CVE-2012-0009 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14393  View
562714 53252 CVE-2012-0009 SECTRACK:1026494  View
562715 53252 CVE-2012-0009 URL:http://www.securitytracker.com/id?1026494  View
562716 53252 CVE-2012-0009 SECUNIA:45189  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
25736 JVNDB-2012-001443 Microsoft .NET Framework および Silverlight における任意のコードを実行される脆弱性 Microsoft .NET Framework および Silverlight は、未管理のオブジェトに関するメモリへのアクセスを適切に制限しないため、任意のコードを実行される脆弱性が存在します。 CVE-2012-0014 53252 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001443.html  View