6.9
CVSSv2

CVE-2010-5195

Published: 06/09/2012 Updated: 06/09/2012
CVSS v2 Base Score: 6.9 | Impact Score: 10 | Exploitability Score: 3.4
VMScore: 695
Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Untrusted search path vulnerability in Roxio MyDVD 9 allows local users to gain privileges via a Trojan horse HomeUtils9.dll file in the current working directory, as demonstrated by a directory that contains a .dmsd or .dmsm file. NOTE: some of these details are obtained from third party information.

Vulnerable Product Search on Vulmon Subscribe to Product

roxio mydvd 9

Exploits

/* Exploit Title: Roxio MyDVD 9 DLL Hijacking Exploit (HomeUtils9dll) Date: August 25, 2010 Author: storm (storm@gonullyourselforg) Tested on: Windows Vista SP2 wwwgonullyourselforg/ gcc -shared -o HomeUtils9dll MyDVD9-DLLc dmsd and dmsm files are affected */ #include <windowsh> #define DllExport __declspec (dllexport) ...