CVE-2012-0008

4 documents4 sources
Severity
6.9MEDIUM
EPSS
3.6%
top 12.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Visual Studio
Timeline
PublishedMar 13
Latest updateMay 4

Description

Untrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 allows local users to gain privileges via a Trojan horse add-in in an unspecified directory, aka "Visual Studio Add-In Vulnerability."

CVSS vector

AV:L/AC:M/C:C/I:C/A:CExploitability: 3.4 | Impact: 10.0

Affected Packages1 packages

▶NVDmicrosoft/visual_studio2008, 2010+1

🔴Vulnerability Details

2
GHSA
GHSA-q9c6-m9p3-3gc7: Untrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 allows local users to gain privileges via a Trojan horse a↗2022-05-04
▶
CVEList
CVE-2012-0008: Untrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 allows local users to gain privileges via a Trojan horse a↗2012-03-13
▶

💥Exploits & PoCs

1
Exploit-DB
Microsoft Windows Server 2012 - 'Group Policy' Remote Code Execution (MS15-011)↗2019-10-29
▶
CVE-2012-0008 (MEDIUM CVSS 6.9) | Untrusted search path vulnerability | cvebase.io