CVE-2010-5248: Medium severity UltraVNC UltraVNC vulnerability
Untrusted search path vulnerability in UltraVNC 1.0.8.2 allows local users to gain privileges via a Trojan horse vnclang.dll file in the current working directory, as demonstrated by a directory that contains a .vnc file. NOTE: some of these details are obtained from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-5248?
CVE-2010-5248 has a medium severity level due to its potential for privilege escalation through untrusted search paths.
How do I fix CVE-2010-5248?
To fix CVE-2010-5248, ensure that you do not run UltraVNC from directories where untrusted DLL files could be located, or update to a patched version if available.
Who is affected by CVE-2010-5248?
CVE-2010-5248 affects users of UltraVNC version 1.0.8.2 who may have a Trojan horse vnclang.dll file in their working directory.
Can CVE-2010-5248 be exploited remotely?
CVE-2010-5248 primarily allows local users to exploit the vulnerability, not remote users.
What is the impact of CVE-2010-5248?
The impact of CVE-2010-5248 is unauthorized privilege escalation through the execution of malicious DLL files.