[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248585

 
 

909

 
 

195621

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2012-0008Date: (C)2012-03-13   (M)2023-12-22


Untrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 allows local users to gain privileges via a Trojan horse add-in in an unspecified directory, aka "Visual Studio Add-In Vulnerability."

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 6.9
Exploit Score: 3.4
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
SECTRACK-1026792
SECUNIA-48396
BID-52329
MS12-021
TA12-073A
ms-visual-studio-priv-esc(73537)
oval:org.mitre.oval:def:15081

CPE    3
cpe:/a:microsoft:visual_studio:2010:sp1
cpe:/a:microsoft:visual_studio:2010
cpe:/a:microsoft:visual_studio:2008:sp1
OVAL    2
oval:org.secpod.oval:def:4747
oval:org.secpod.oval:def:4748

© SecPod Technologies