MEDIUM · 6.3

CVE-2012-4754

Multiple untrusted search path vulnerabilities in MindManager 2012 10.0.493 allow local users to gain privileges via a Trojan horse (1) ssgp.dll or (2) dwmapi.dll file in the current working directory...

Vulnerability Description

Multiple untrusted search path vulnerabilities in MindManager 2012 10.0.493 allow local users to gain privileges via a Trojan horse (1) ssgp.dll or (2) dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .mmap file. NOTE: some of these details are obtained from third party information.

CVSS Score

6.3

MEDIUM

AV:L/AC:M/Au:N/C:C/I:C/A:N
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
NONE

Affected Products

VendorProductVersions
MindjetMindmanager 201210.0.493

References

FAQ

What is CVE-2012-4754?

CVE-2012-4754 is a vulnerability with a CVSS score of 6.3 (MEDIUM). Multiple untrusted search path vulnerabilities in MindManager 2012 10.0.493 allow local users to gain privileges via a Trojan horse (1) ssgp.dll or (2) dwmapi.dll file in the current working directory...

How severe is CVE-2012-4754?

CVE-2012-4754 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2012-4754?

Check the references section above for vendor advisories and patch information. Affected products include: Mindjet Mindmanager 2012.