CVE Reference: CVE-2012-0009

NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2012-0009

Description:
Untrusted search path vulnerability in the Windows Object Packager configuration in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse executable file in the current working directory, as demonstrated by a directory that contains a file with an embedded packaged object, aka "Object Packager Insecure Executable Launching Vulnerability."

CVE Status:
Candidate

References:

ST
  1026494

SAID
  Secunia Advisory: SA45189

OVAL
  http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14393

MS
  http://technet.microsoft.com/security/bulletin/MS12-002

CERT
  http://www.us-cert.gov/cas/techalerts/TA12-010A.html

BID
  51297


Return to the previous page.