certfr_avis - certa-2012-avi-078

CERTA-2012-AVI-078

Vulnerability from certfr_avis

Description

Une vulnérabilité existe dans la façon dont le panneau de configuration des couleurs gère le chargement de bibliothèques additionnelles (DLL). L'exploitation réussie de cette vulnérabilité peut alors entrainer l'exécution de code arbitraire à distance. Cette vulnérabilité sera déclenchée lors de l'ouverture d'un fichier légitime .icm ou .icc depuis un emplacement contenant une DLL malveillante.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Microsoft	Windows	Windows Server 2008 R2 et Service Pack 1.
	Microsoft	Windows	Windows Server 2008 Service Pack 2 ;

References

Title

Publication Time

Tags

Bulletin de sécurité Microsoft MS12-012

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Windows Server 2008 R2 et Service Pack 1.",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 Service Pack 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 existe dans la fa\u00e7on dont le panneau de configuration\ndes couleurs g\u00e8re le chargement de biblioth\u00e8ques additionnelles (DLL).\nL\u0027exploitation r\u00e9ussie de cette vuln\u00e9rabilit\u00e9 peut alors entrainer\nl\u0027ex\u00e9cution de code arbitraire \u00e0 distance. Cette vuln\u00e9rabilit\u00e9 sera\nd\u00e9clench\u00e9e lors de l\u0027ouverture d\u0027un fichier l\u00e9gitime .icm ou .icc depuis\nun emplacement contenant une DLL malveillante.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2010-5082",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-5082"
    }
  ],
  "initial_release_date": "2012-02-15T00:00:00",
  "last_revision_date": "2012-02-15T00:00:00",
  "links": [],
  "reference": "CERTA-2012-AVI-078",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2012-02-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 existe dans la fa\u00e7on dont le panneau de configuration\ndes couleurs g\u00e8re le chargement de biblioth\u00e8ques additionnelles (DLL).\nL\u0027exploitation r\u00e9ussie de cette vuln\u00e9rabilit\u00e9 peut alors entrainer\nl\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans le panneau de configuration des couleurs de Microsoft Windows",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS12-012",
      "url": "http://technet.microsoft.com/en-us/security/bulletin/MS12-012"
    }
  ]
}

CVE-2010-5082 (GCVE-0-2010-5082)

Vulnerability from cvelistv5

Published

2012-01-17 19:00

Modified

2024-08-07 04:09

Severity ?

CWE

Summary

Untrusted search path vulnerability in colorcpl.exe 6.0.6000.16386 in the Color Control Panel in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges via a Trojan horse sti.dll file in the current working directory, as demonstrated by a directory that contains a .camp, .cdmp, .gmmp, .icc, or .icm file, aka "Color Control Panel Insecure Library Loading Vulnerability."

References

URL

Tags

	http://www.us-cert.gov/cas/techalerts/TA12-045A.html	third-party-advisory, x_refsource_CERT
	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-012	vendor-advisory, x_refsource_MS
	http://shinnai.altervista.org/exploits/SH-006-20100914.html	x_refsource_MISC
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14446	vdb-entry, signature, x_refsource_OVAL

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:09:38.989Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "TA12-045A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA12-045A.html"
          },
          {
            "name": "MS12-012",
            "tags": [
              "vendor-advisory",
              "x_refsource_MS",
              "x_transferred"
            ],
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-012"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://shinnai.altervista.org/exploits/SH-006-20100914.html"
          },
          {
            "name": "oval:org.mitre.oval:def:14446",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14446"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-09-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Untrusted search path vulnerability in colorcpl.exe 6.0.6000.16386 in the Color Control Panel in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges via a Trojan horse sti.dll file in the current working directory, as demonstrated by a directory that contains a .camp, .cdmp, .gmmp, .icc, or .icm file, aka \"Color Control Panel Insecure Library Loading Vulnerability.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-12T19:57:01",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "TA12-045A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA12-045A.html"
        },
        {
          "name": "MS12-012",
          "tags": [
            "vendor-advisory",
            "x_refsource_MS"
          ],
          "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-012"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://shinnai.altervista.org/exploits/SH-006-20100914.html"
        },
        {
          "name": "oval:org.mitre.oval:def:14446",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14446"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@microsoft.com",
          "ID": "CVE-2010-5082",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Untrusted search path vulnerability in colorcpl.exe 6.0.6000.16386 in the Color Control Panel in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges via a Trojan horse sti.dll file in the current working directory, as demonstrated by a directory that contains a .camp, .cdmp, .gmmp, .icc, or .icm file, aka \"Color Control Panel Insecure Library Loading Vulnerability.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "TA12-045A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA12-045A.html"
            },
            {
              "name": "MS12-012",
              "refsource": "MS",
              "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-012"
            },
            {
              "name": "http://shinnai.altervista.org/exploits/SH-006-20100914.html",
              "refsource": "MISC",
              "url": "http://shinnai.altervista.org/exploits/SH-006-20100914.html"
            },
            {
              "name": "oval:org.mitre.oval:def:14446",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14446"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2010-5082",
    "datePublished": "2012-01-17T19:00:00",
    "dateReserved": "2012-01-16T00:00:00",
    "dateUpdated": "2024-08-07T04:09:38.989Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CERTA-2012-AVI-078

Vulnerability from certfr_avis

Description

Solution

CVE-2010-5082 (GCVE-0-2010-5082)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature