Vulnerability in Roxio Easy Media Creator

CVE-2010-5236

Untrusted search path vulnerability in Roxio Easy Media Creator Home 9.0.136 allows local users to gain privileges via a Trojan horse homeutils9.dll file in the current working directory, as demonstrated by a directory that contains a .roxio, .c2d, or .gi file. NOTE: some of these details are obtained from third party information.

EPSS: 0.010 (59.7th percentile) — read the EPSS interpretation.

Affected products

References

  • cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)
  • cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)