CVE-2011-1975
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
10/08/2011
Last modified:
28/09/2020
Description
Untrusted search path vulnerability in the Data Access Tracing component in Windows Data Access Components (Windows DAC) 6.0 in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an Excel .xlsx file, aka "Data Access Components Insecure Library Loading Vulnerability."
Impact
Base Score 2.0
9.30
Severity 2.0
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:* | ||
| cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:* | ||
| cpe:2.3:o:microsoft:windows_server_2008:r2:*:itanium:*:*:*:*:* | ||
| cpe:2.3:o:microsoft:windows_server_2008:r2:*:x64:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page