CVE-2013-3485 — MEDIUM (6.9)

Vulnerability Description

Multiple untrusted search path vulnerabilities in Soda PDF 5.1.183.10520 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) api-ms-win-core-localregistry-l1-1-0.dll file in the current working directory.

CVSS Score

6.9

MEDIUM

AV:L/AC:M/Au:N/C:C/I:C/A:C

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Lulusoftware	Soda Pdf	5.1.183.10520

References

http://secunia.com/advisories/53207Vendor Advisory
http://secunia.com/advisories/53207Vendor Advisory

FAQ

What is CVE-2013-3485?

CVE-2013-3485 is a vulnerability with a CVSS score of 6.9 (MEDIUM). Multiple untrusted search path vulnerabilities in Soda PDF 5.1.183.10520 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) api-ms-win-core-localregistry-l1-1-0.dll file in ...

How severe is CVE-2013-3485?

CVE-2013-3485 has been rated MEDIUM with a CVSS base score of 6.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-3485?

Check the references section above for vendor advisories and patch information. Affected products include: Lulusoftware Soda Pdf.