Search

Find a vulnerability

Search criteria

    1 vulnerability by Label Gate Co., Ltd.

    JVNDB-2013-000006

    Vulnerability from jvndb - Published: 2013-02-07 05:00 - Updated:2013-02-07 05:00
    Severity
    N/A (UNKNOWN) - -
    Summary
    mora Downloader may insecurely load executable files
    Details
    mora Downloader may use unsafe methods for determining how to load executables (.exe) mora Downloader contains an issue in the file search path when loading files, which may insecurely load executables or other files. Kazuhiko Kusano of Graduate School of Information Sciences, Tohoku University reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
    Impacted products
    Show details on JVN DB website

    {
      "@rdf:about": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000006.html",
      "dc:date": "2013-02-07T14:00+09:00",
      "dcterms:issued": "2013-02-07T14:00+09:00",
      "dcterms:modified": "2013-02-07T14:00+09:00",
      "description": "mora Downloader may use unsafe methods for determining how to load executables (.exe)\r\n\r\nmora Downloader contains an issue in the file search path when loading files, which may insecurely load executables or other files.\r\n\r\nKazuhiko Kusano of Graduate School of Information Sciences, Tohoku University reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
      "link": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000006.html",
      "sec:cpe": {
        "#text": "cpe:/a:labelgate:label_gate_mora_downloader",
        "@product": "mora Downloader",
        "@vendor": "Label Gate Co., Ltd.",
        "@version": "2.2"
      },
      "sec:cvss": {
        "@score": "5.1",
        "@severity": "Medium",
        "@type": "Base",
        "@vector": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
        "@version": "2.0"
      },
      "sec:identifier": "JVNDB-2013-000006",
      "sec:references": [
        {
          "#text": "https://jvn.jp/en/jp/JVN91387819/index.html",
          "@id": "JVN#91387819",
          "@source": "JVN"
        },
        {
          "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5188",
          "@id": "CVE-2012-5188",
          "@source": "CVE"
        },
        {
          "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-5188",
          "@id": "CVE-2012-5188",
          "@source": "NVD"
        },
        {
          "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
          "@id": "CWE-Other",
          "@title": "No Mapping(CWE-Other)"
        }
      ],
      "title": "mora Downloader may insecurely load executable files"
    }