CPE Details
Cisco Packet Tracer 5.2
5.2
2010-08-27
11h29 +00:00
11h29 +00:00
2010-08-30
18h08 +00:00
18h08 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:cisco:packet_tracer:5.2:*:*:*:*:*:*:*
Informations
Vendor
ciscoProduct
packet_tracerVersion
5.2Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| An untrusted search path (aka DLL Preload) vulnerability in the Cisco Network Academy Packet Tracer software could allow an authenticated, local attacker to execute arbitrary code via DLL hijacking if a local user with administrative privileges executes the installer in the current working directory where a crafted DLL has been placed by an attacker. The vulnerability is due to incomplete input validation of path and file names of a DLL file before it is loaded. An attacker could exploit this vulnerability by creating a malicious DLL file and installing it in a specific system directory. A successful exploit could allow the attacker to execute commands on the underlying Microsoft Windows host with privileges equivalent to the SYSTEM account. An attacker would need valid user credentials to exploit this vulnerability. | 6.7 |
Medium |
||
| Untrusted search path vulnerability in Cisco Packet Tracer 5.2 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll that is located in the same folder as a .pkt or .pkz file. | 9.3 |
2025©
tesweb SA
