CVE-2010-3163: Medium severity sleipnir mobile vulnerability
Published Oct 25, 2010
·Updated
Untrusted search path vulnerability in Fenrir Sleipnir before 2.9.5 and Grani before 4.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
Affected Software
43 affected components
Fenrir Sleipnir=2.5.1
Fenrir Sleipnir=2.9.1
Fenrir Sleipnir=2.5.10
Fenrir Sleipnir=2.9.2
Fenrir Sleipnir=2.5.3
Fenrir Sleipnir=2.6.0
Fenrir Sleipnir=2.7.1-r2
Fenrir Sleipnir=2.5.6
Fenrir Sleipnir=2.5.14
Fenrir Sleipnir=2.8.5
Fenrir Sleipnir=2.5.9
Fenrir Sleipnir=2.5.16
Fenrir Sleipnir=2.5.8
Fenrir Sleipnir=2.9.3
Fenrir Sleipnir=2.8.4
Fenrir Sleipnir=2.5.13
Fenrir Sleipnir=2.9
Fenrir Sleipnir=2.5.4
Fenrir Sleipnir=2.5.11
Fenrir Sleipnir=2.7.2
Fenrir Sleipnir=2.8.2
Fenrir Sleipnir=2.5.15
Fenrir Sleipnir<=2.9.4
Fenrir Sleipnir=2.5.7
Fenrir Sleipnir=2.5.17
Fenrir Sleipnir=2.8
Fenrir Sleipnir=2.7.1
Fenrir Sleipnir=2.6.1
Fenrir Sleipnir=2.5.2
Fenrir Sleipnir=2.6.2
Fenrir Sleipnir=2.5.0
Fenrir Sleipnir=2.8.3
Fenrir Sleipnir=2.7.0
Fenrir Sleipnir=2.5.12
Fenrir Sleipnir=2.5.5
Fenrir Grani=3.5
Fenrir Grani=3.0
Fenrir Grani=3.2
Fenrir Grani=3.1
Fenrir Grani<=4.3
Fenrir Grani=4.1
Fenrir Grani=4.2
Fenrir Grani=4.0
Event History
Oct 25, 2010
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
Who is exposed to this issue?
Systems running Fenrir Sleipnir versions before 2.9.5 or Fenrir Grani versions before 4.4 are affected. Exploitation requires local access.
2
What does an attacker need to exploit it?
An attacker needs to place a Trojan horse DLL in the application's current working directory so that the vulnerable application loads it through an untrusted search path.
3
What is the potential impact of successful exploitation?
A local attacker may gain privileges and compromise confidentiality, integrity, and availability.