peter bassill · operator
$ cve CVE-2010-5195 JSON

CVE-2010-5195 EXPLOIT

6.9
MEDIUM · CVSS 2.0 · EPSS 0.9% (pctl 58)

Patch early

A public exploit exists.

Description

Untrusted search path vulnerability in Roxio MyDVD 9 allows local users to gain privileges via a Trojan horse HomeUtils9.dll file in the current working directory, as demonstrated by a directory that contains a .dmsd or .dmsm file. NOTE: some of these details are obtained from third party information.

Scoring

CVSS6.9 (MEDIUM, v2.0)
VectorAV:L/AC:M/Au:N/C:C/I:C/A:C
EPSS0.89% — more likely to be exploited than 58% of all CVEs
On CISA KEVno
Public exploityes
Published2012-09-06
Last modified2026-06-16

Affected (1)

VendorProduct
roxiomydvd

Public exploits

SourceTitleDate
exploit-dbRoxio MyDVD 9 - 'HomeUtils9.dll' DLL Hijacking2010-08-25

References

→ the Explorer  ·  watch your stack  ·  NVD