ByteOS Network

NVD Vulnerability Details :

CVE-2010-3160

Modified

Source-vultures@jpcert.or.jp

Published At-25 Oct, 2010 | 20:01

Updated At-29 Apr, 2026 | 01:13

Untrusted search path vulnerability in Archive Decoder 1.23 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	6.9	MEDIUM	AV:L/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 6.9

Base severity: MEDIUM

Vector:

AV:L/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

ponsoftware>>archive_decoder>>Versions up to 1.23(inclusive)

cpe:2.3:a:ponsoftware:archive_decoder:*:*:*:*:*:*:*:*

ponsoftware>>archive_decoder>>1.00

cpe:2.3:a:ponsoftware:archive_decoder:1.00:*:*:*:*:*:*:*

ponsoftware>>archive_decoder>>1.01

cpe:2.3:a:ponsoftware:archive_decoder:1.01:*:*:*:*:*:*:*

ponsoftware>>archive_decoder>>1.02

cpe:2.3:a:ponsoftware:archive_decoder:1.02:*:*:*:*:*:*:*

ponsoftware>>archive_decoder>>1.03

cpe:2.3:a:ponsoftware:archive_decoder:1.03:*:*:*:*:*:*:*

ponsoftware>>archive_decoder>>1.04

cpe:2.3:a:ponsoftware:archive_decoder:1.04:*:*:*:*:*:*:*

ponsoftware>>archive_decoder>>1.05

cpe:2.3:a:ponsoftware:archive_decoder:1.05:*:*:*:*:*:*:*

ponsoftware>>archive_decoder>>1.06

cpe:2.3:a:ponsoftware:archive_decoder:1.06:*:*:*:*:*:*:*

ponsoftware>>archive_decoder>>1.07

cpe:2.3:a:ponsoftware:archive_decoder:1.07:*:*:*:*:*:*:*

ponsoftware>>archive_decoder>>1.08

cpe:2.3:a:ponsoftware:archive_decoder:1.08:*:*:*:*:*:*:*

ponsoftware>>archive_decoder>>1.09

cpe:2.3:a:ponsoftware:archive_decoder:1.09:*:*:*:*:*:*:*

ponsoftware>>archive_decoder>>1.11

cpe:2.3:a:ponsoftware:archive_decoder:1.11:*:*:*:*:*:*:*

ponsoftware>>archive_decoder>>1.12

cpe:2.3:a:ponsoftware:archive_decoder:1.12:*:*:*:*:*:*:*

ponsoftware>>archive_decoder>>1.13

cpe:2.3:a:ponsoftware:archive_decoder:1.13:*:*:*:*:*:*:*

ponsoftware>>archive_decoder>>1.20

cpe:2.3:a:ponsoftware:archive_decoder:1.20:*:*:*:*:*:*:*

ponsoftware>>archive_decoder>>1.21

cpe:2.3:a:ponsoftware:archive_decoder:1.21:*:*:*:*:*:*:*

ponsoftware>>archive_decoder>>1.22

cpe:2.3:a:ponsoftware:archive_decoder:1.22:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

CWE ID: NVD-CWE-Other

Type: Primary

Source: nvd@nist.gov

Evaluator Description

Per: http://cwe.mitre.org/data/definitions/426.html 'CWE-426: Untrusted Search Path'

References

Hyperlink	Source	Resource
http://jvn.jp/en/jp/JVN68536660/index.html	vultures@jpcert.or.jp	N/A
http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000044.html	vultures@jpcert.or.jp	N/A
http://www.ponsoftware.com/en/	vultures@jpcert.or.jp	Vendor Advisory
http://jvn.jp/en/jp/JVN68536660/index.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000044.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.ponsoftware.com/en/	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory