Vulnerability Description
Untrusted search path vulnerability in Help & Manual 5.5.1 Build 1296 allows local users to gain privileges via a Trojan horse ijl15.dll file in the current working directory, as demonstrated by a directory that contains a .hmxz, .hmxp, .hmskin, .hmx, .hm3, .hpj, .hlp, or .chm file. NOTE: some of these details are obtained from third party information.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Helpandmanual | Help \& Manual | 5.5.1 |
References
- http://secunia.com/advisories/44170Vendor Advisory
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5009.php
- http://secunia.com/advisories/44170Vendor Advisory
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5009.php
FAQ
What is CVE-2011-5155?
CVE-2011-5155 is a vulnerability with a CVSS score of 6.3 (MEDIUM). Untrusted search path vulnerability in Help & Manual 5.5.1 Build 1296 allows local users to gain privileges via a Trojan horse ijl15.dll file in the current working directory, as demonstrated by a dir...
How severe is CVE-2011-5155?
CVE-2011-5155 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-5155?
Check the references section above for vendor advisories and patch information. Affected products include: Helpandmanual Help \& Manual.