CVE-2010-5247 — MEDIUM (6.9)

Vulnerability Description

Untrusted search path vulnerability in QtWeb Browser 3.3 build 043 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .html, .htm, or .mhtml file. NOTE: some of these details are obtained from third party information.

CVSS Score

6.9

MEDIUM

AV:L/AC:M/Au:N/C:C/I:C/A:C

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Qtweb	Qtweb	3.3

References

http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0386.htmlExploit
http://secunia.com/advisories/41201Vendor Advisory
http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0386.htmlExploit
http://secunia.com/advisories/41201Vendor Advisory

FAQ

What is CVE-2010-5247?

CVE-2010-5247 is a vulnerability with a CVSS score of 6.9 (MEDIUM). Untrusted search path vulnerability in QtWeb Browser 3.3 build 043 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a dir...

How severe is CVE-2010-5247?

CVE-2010-5247 has been rated MEDIUM with a CVSS base score of 6.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2010-5247?

Check the references section above for vendor advisories and patch information. Affected products include: Qtweb Qtweb.