CVE-2010-5239: Medium severity Daemon-tools Daemon Tools vulnerability

Published Sep 7, 2012

Updated

Untrusted search path vulnerability in DAEMON Tools Lite 4.35.6.0091 and Pro Standard 4.36.0309.0160 allows local users to gain privileges via a Trojan horse mfc80loc.dll file in the current working directory, as demonstrated by a directory that contains a .mds file. NOTE: some of these details are obtained from third party information.

Affected Software

2 affected components

Daemon-tools Daemon Tools=4.36.0309.0160

Daemon-tools Daemon Tools=4.35.6.0091

Event History

Sep 7, 2012

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2010-5239?

The severity of CVE-2010-5239 is medium, rated at 6.9.

How do I fix CVE-2010-5239?

To fix CVE-2010-5239, ensure that you do not have untrusted DLL files in the working directory of DAEMON Tools Lite or Pro.

What is the risk associated with CVE-2010-5239?

CVE-2010-5239 has a risk rating of 59, indicating a significant potential for privilege escalation.

Who is affected by CVE-2010-5239?

Local users of DAEMON Tools Lite 4.35.6.0091 and Pro Standard 4.36.0309.0160 are affected by CVE-2010-5239.

What type of vulnerability is CVE-2010-5239?

CVE-2010-5239 is classified as an untrusted search path vulnerability.