CVE:CVE-2010-3923
CNNVD:CNNVD-201012-265
AttacheCase 2.70之前版本中存在非信任搜索路径漏洞。本地用户可以借助当前工作目录中的Trojan木马可执行文件获取特权。
solution:Upgrade mitsu_hiro_hi_rose attachecase to a higher version than 2.69,0.01,0.02,0.03,0.04,0.05,0.06,0.07,1.00,1.01,1.02,1.03,1.04,1.05,1.06,1.07,1.08,1.09,1.10,1.11,1.12,1.20,1.21,1.22,1.23,1.24,1.25,1.30,1.31,1.32,1.33,1.34,1.35,1.36,1.37,1.38,1.39,1.40,1.41,1.42,1.43,1.44,1.45,1.46,1.091,2.00,2.01,2.02,2.03,2.04,2.05,2.06,2.07,2.08,2.09,2.10,2.11,2.12,2.13,2.14,2.15,2.16,2.17,2.18,2.20,2.21,2.22,2.23,2.24,2.25,2.26,2.27,2.28,2.30,2.31,2.32,2.33,2.34,2.35,2.36,2.37,2.38,2.40,2.41,2.42,2.43,2.44,2.45,2.46,2.47,2.48,2.49,2.50,2.51,2.52,2.53,2.54,2.55,2.56,2.57,2.58,2.60,2.61,2.62,2.63,2.64,2.65,2.66,2.67,2.68,and avoid the version (,2.69],0.01,0.02,0.03,0.04,0.05,0.06,0.07,1.00,1.01,1.02,1.03,1.04,1.05,1.06,1.07,1.08,1.09,1.10,1.11,1.12,1.20,1.21,1.22,1.23,1.24,1.25,1.30,1.31,1.32,1.33,1.34,1.35,1.36,1.37,1.38,1.39,1.40,1.41,1.42,1.43,1.44,1.45,1.46,1.091,2.00,2.01,2.02,2.03,2.04,2.05,2.06,2.07,2.08,2.09,2.10,2.11,2.12,2.13,2.14,2.15,2.16,2.17,2.18,2.20,2.21,2.22,2.23,2.24,2.25,2.26,2.27,2.28,2.30,2.31,2.32,2.33,2.34,2.35,2.36,2.37,2.38,2.40,2.41,2.42,2.43,2.44,2.45,2.46,2.47,2.48,2.49,2.50,2.51,2.52,2.53,2.54,2.55,2.56,2.57,2.58,2.60,2.61,2.62,2.63,2.64,2.65,2.66,2.67,2.68