What is CVE-2010-5250?

CVE-2010-5250 is a vulnerability in Pthread-Win32 Project Pthreads-Win32, classified under Untrusted Search Path. Published 2012-09-07.

Is CVE-2010-5250 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Pthread-Win32 Project Pthreads-Win32

CVE-2010-5250

Untrusted search path vulnerability in the pthread_win32_process_attach_np function in pthreadGC2.dll in Pthreads-win32 2.8.0 allows local users to gain privileges via a Trojan horse quserex.dll file in the current working directory. NOTE: some of these details are obtained from third party information.

EPSS: 0.004 (35.9th percentile) — read the EPSS interpretation.

Affected products

Pthread-win32_project Pthreads-win32 — versions 2.8.0
N/a — versions n/a

Weakness classification (CWE)

CWE-426 — Untrusted Search Path

Public proof-of-concept exploits

Live-Hack-CVE/CVE-2010-5250

References

cve@mitre.org (x_refsource_SECUNIA, Not Applicable, Vendor Advisory, third-party-advisory)
cve@mitre.org (x_refsource_MISC, Broken Link)

Frequently asked questions

What is CVE-2010-5250?: CVE-2010-5250 is a vulnerability in Pthread-Win32 Project Pthreads-Win32, classified under Untrusted Search Path. Published 2012-09-07.
Is CVE-2010-5250 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.