Refine your search

1 vulnerability found for mora Downloader by Label Gate Co., Ltd.

jvndb-2013-000006
Vulnerability from jvndb
Published
2013-02-07 14:00
Modified
2013-02-07 14:00
Severity ?
() - -
Summary
mora Downloader may insecurely load executable files
Details
mora Downloader may use unsafe methods for determining how to load executables (.exe) mora Downloader contains an issue in the file search path when loading files, which may insecurely load executables or other files. Kazuhiko Kusano of Graduate School of Information Sciences, Tohoku University reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
Impacted products
Show details on JVN DB website


{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000006.html",
  "dc:date": "2013-02-07T14:00+09:00",
  "dcterms:issued": "2013-02-07T14:00+09:00",
  "dcterms:modified": "2013-02-07T14:00+09:00",
  "description": "mora Downloader may use unsafe methods for determining how to load executables (.exe)\r\n\r\nmora Downloader contains an issue in the file search path when loading files, which may insecurely load executables or other files.\r\n\r\nKazuhiko Kusano of Graduate School of Information Sciences, Tohoku University reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000006.html",
  "sec:cpe": {
    "#text": "cpe:/a:labelgate:label_gate_mora_downloader",
    "@product": "mora Downloader",
    "@vendor": "Label Gate Co., Ltd.",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "5.1",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2013-000006",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN91387819/index.html",
      "@id": "JVN#91387819",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5188",
      "@id": "CVE-2012-5188",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-5188",
      "@id": "CVE-2012-5188",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "mora Downloader may insecurely load executable files"
}