NVD

Id
42158  
Name
CVE-2012-0009  
Description
Untrusted search path vulnerability in the Windows Object Packager configuration in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse executable file in the current working directory, as demonstrated by a directory that contains a file with an embedded packaged object, aka "Object Packager Insecure Executable Launching Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-01-10  
Modified Date
2013-03-06  
Seq
2012-0009  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
212786 42158 CVE-2012-0009 oval:org.mitre.oval:def:14393  View
212787 42158 CVE-2012-0009 MS12-002  View
212788 42158 CVE-2012-0009 51297  View
212789 42158 CVE-2012-0009 1026494  View
212790 42158 CVE-2012-0009 TA12-010A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25340 JVNDB-2012-001047 複数の Microsoft Windows 製品の Windows Object Packager 設定における権限昇格の脆弱性 複数の Microsoft Windows 製品の Windows Object Packager 設定には、検索パスに関する処理に不備があるため、権限を取得される脆弱性が存在します。 CVE-2012-0009 53247 CVE-2012-0009 42158 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001047.html 2012-01-10 2012-01-23 View