PT-2012-1425
CVE-2010-5214
·
Published
2012-09-06
·
Updated
2012-09-06
Description by
CVSS 2.0
6.9
MediumMetricsAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Fotobook Editor version 5.0 2.8.0.1
Description
The issue allows local users to gain privileges via a Trojan horse Fwpuclnt.dll file in the current working directory. This can be demonstrated by a directory that contains a .dtp file.
Recommendations
For version 5.0 2.8.0.1, consider restricting access to the current working directory to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾