Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2010-5248

Overview
Vulnerability Score	6.9
CVE Id	CVE-2010-5248
Last Modified	07 Sep 2012 01:20:50
Published	07 Sep 2012 06:32:22
Confidentiality Impact	COMPLETE
Integrity Impact	COMPLETE
Availability Impact	COMPLETE
Access Vector	LOCAL
Access Complexity	MEDIUM
Authentication	NONE

CVE-2010-5248

Summary

Untrusted search path vulnerability in UltraVNC 1.0.8.2 allows local users to gain privileges via a Trojan horse vnclang.dll file in the current working directory, as demonstrated by a directory that contains a .vnc file. NOTE: some of these details are obtained from third party information.