CVE-2015-3999: Infoleak
Published May 20, 2015
·Updated
Piriform CCleaner 3.26.0.1988 through 5.02.5101 writes the filenames to disk when overwriting files, which allows local users to obtain sensitive information by searching unallocated disk space.
Affected Software
26 affected components
Piriform CCleaner=3.26.1888
Piriform CCleaner=3.27.1900
Piriform CCleaner=3.28.1913
Piriform CCleaner=4.00.4064
Piriform CCleaner=4.01.4093
Piriform CCleaner=4.02.4115
Piriform CCleaner=4.03.4151
Piriform CCleaner=4.04.4197
Piriform CCleaner=4.05.4250
Piriform CCleaner=4.06.4324
Piriform CCleaner=4.07.4369
Piriform CCleaner=4.08.4428
Piriform CCleaner=4.09.4471
Piriform CCleaner=4.10.4570
Piriform CCleaner=4.11.4619
Piriform CCleaner=4.12.4657
Piriform CCleaner=4.13.4693
Piriform CCleaner=4.14.4707
Piriform CCleaner=4.15.4725
Piriform CCleaner=4.16.4763
Piriform CCleaner=4.17.4808
Piriform CCleaner=4.18.4844
Piriform CCleaner=4.19.4867
Piriform CCleaner=5.00.5050
Piriform CCleaner=5.01.5075
Piriform CCleaner=5.02.5101
Event History
May 20, 2015
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-3999?
CVE-2015-3999 has a moderate severity rating due to the leakage of sensitive information through unallocated disk space.
2
How do I fix CVE-2015-3999?
To fix CVE-2015-3999, upgrade to a version of Piriform CCleaner newer than 5.02.5101.
3
What are the affected versions of Piriform CCleaner for CVE-2015-3999?
The affected versions of Piriform CCleaner range from 3.26.1888 through 5.02.5101.
4
What kind of data can be exposed by CVE-2015-3999?
CVE-2015-3999 can expose sensitive filenames that may be recoverable from unallocated disk space.
5
Is CVE-2015-3999 a remote or local vulnerability?
CVE-2015-3999 is a local vulnerability that requires access to the machine to exploit.