CVE-2010-3402

CRITICO 9.3CVE-2010-3402 · Published 16/09/2010 · updated 16/06/2026

In breve

CVE-2010-3402 è una vulnerabilità CRITICO (CVSS 9.3) che riguarda ultraedit (ultraedit).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.2%, superiore al 91.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
ultraedit ultraedit	`= 16.10.0.1036= 16.20.0.1009`	No fix yet

Description

Untrusted search path vulnerability in IDM Computer Solutions UltraEdit 16.20.0.1009, 16.10.0.1036, and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a bin, cpp, css, c, dat, hpp, html, h, ini, java, log, mak, php, prj, txt, or xml file.

References

archives.neohapsis.com/archives/fulldisclosure/2010-09/0227.html · Vendor Advisory
osvdb.org/67995
secunia.com/advisories/41403 · Vendor Advisory
securityfocus.com/bid/43183

Altre vulnerabilità di ultraedit

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free