CVE-2010-5247

MEDIUM

Description

Untrusted search path vulnerability in QtWeb Browser 3.3 build 043 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .html, .htm, or .mhtml file. NOTE: some of these details are obtained from third party information.

References

http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0386.html

http://secunia.com/advisories/41201

Details

Source: MITRE

Published: 2012-09-07

Updated: 2012-09-07

Risk Information

CVSS v2.0

Base Score: 6.9

Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 3.4

Severity: MEDIUM