PT-2012-1418
CVE-2010-5207
·
Published
2012-09-06
·
Updated
2012-09-06
Description by
CVSS 2.0
6.9
MediumMetricsAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
CelFrame Office 2008 Standard Edition
Description
The issue allows local users to gain privileges via a Trojan horse
java msci.dll or msci java.dll file in the current working directory. This can be demonstrated by a directory that contains a .doc, .xls, or .odg file.Recommendations
For CelFrame Office 2008 Standard Edition, consider restricting access to untrusted search paths to minimize the risk of exploitation. As a temporary workaround, avoid using directories that contain untrusted files, especially those with .doc, .xls, or .odg extensions, until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾