CVE-2012-0305
First published: Mon Jul 23 2012(Updated: )
Untrusted search path vulnerability in Symantec System Recovery 2011 before SP2 and Backup Exec System Recovery 2010 before SP5 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Symantec Backup Exec System Recovery | =2010 | |
| Symantec Backup Exec System Recovery | =2011 | |
| Symantec System Recovery 2011 | =2011 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What are the vulnerabilities associated with CVE-2012-0305?
CVE-2012-0305 describes an untrusted search path vulnerability that allows local users to gain elevated privileges via a Trojan horse DLL.
Which versions of software are affected by CVE-2012-0305?
CVE-2012-0305 affects Symantec System Recovery 2011 before SP2 and Backup Exec System Recovery 2010 before SP5.
How can I mitigate the risk of CVE-2012-0305?
To mitigate CVE-2012-0305, ensure that you update to the latest service packs for the affected Symantec software.
What could happen if CVE-2012-0305 is exploited?
If exploited, CVE-2012-0305 could allow local users to execute arbitrary code with elevated privileges.
Is there an official fix for CVE-2012-0305?
Yes, Symantec has released updates that address CVE-2012-0305, which should be applied promptly.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/symantec
- canonical/symantec backup exec system recovery
- version/symantec backup exec system recovery/2010
- version/symantec backup exec system recovery/2011
- canonical/symantec system recovery 2011
- version/symantec system recovery 2011/2011