CVE-2010-3160

MEDIUM 6.9CVE-2010-3160 · Published 25/10/2010 · updated 16/06/2026

In short

CVE-2010-3160 is a MEDIUM (CVSS 6.9) vulnerability affecting archive decoder (ponsoftware).
Chance of exploitation in the next 30 days (EPSS): 0.28%, higher than 20.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
archive decoder ponsoftware	`= 1.00= 1.01= 1.02= 1.03= 1.04= 1.05= 1.06= 1.07= 1.08= 1.09= 1.11= 1.12= 1.13= 1.20= 1.21= 1.22≤ 1.23`	No fix yet

Description

Untrusted search path vulnerability in Archive Decoder 1.23 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory.

References

jvn.jp/en/jp/JVN68536660/index.html
jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000044.html
ponsoftware.com/en · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free