NVD

Id
49012  
Name
CVE-2009-1743  
Description
Directory traversal vulnerability in InstallHFZ.exe 6.5.201.0 in Pinnacle Hollywood Effects 6, a module in Pinnacle Systems Pinnacle Studio 12, allows remote attackers to create and overwrite arbitrary files via a filename containing a .. (dot dot backslash) sequence in a Hollywood FX Compressed Archive (.hfz) file. NOTE: this can be leveraged for code execution by decompressing a file to a Startup folder. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-05-20  
Modified Date
2009-07-01  
Seq
2009-1743  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
247873 49012 CVE-2009-1743 http://retrogod.altervista.org/9sg_pinnacle_studio_12_hfz.htm  View
247874 49012 CVE-2009-1743 8670  View
247875 49012 CVE-2009-1743 20090513 Pinnacle Studio 12 "Hollywood FX Compressed Archive" (.hfz) directory traversal vulnerability poc  View
247876 49012 CVE-2009-1743 34936  View
247877 49012 CVE-2009-1743 pinnaclestudio-hfz-directory-traversal(50510)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45016 JVNDB-2009-006023 Pinnacle Systems Pinnacle Studio の Pinnacle Hollywood Effects モジュールの InstallHFZ.exe におけるディレクトリトラバーサルの脆弱性 Pinnacle Systems Pinnacle Studio の Pinnacle Hollywood Effects モジュールの InstallHFZ.exe には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2009-1743 39174 CVE-2009-1743 49012 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006023.html 2009-05-20 2012-12-20 View