CVE:CVE-2010-3161
CNNVD:CNNVD-201010-369
TeraPad 1.00之前版本中存在非信任搜索路径漏洞。本地用户可以借助在当前工作目录中的Trojan木马DLL获得权限提升。
solution:Upgrade susumu_terao terapad to a higher version than 0.93,0.01,0.02,0.03,0.04,0.05,0.06,0.07,0.08,0.09,0.10,0.11,0.12,0.13,0.14,0.15,0.20,0.21,0.22,0.23,0.24,0.25,0.30,0.31,0.32,0.33,0.34,0.35,0.36,0.37,0.38,0.39,0.40,0.41,0.42,0.50,0.51,0.52,0.60,0.61,0.70,0.71,0.72,0.73,0.74,0.75,0.76,0.77,0.78,0.79,0.80,0.81,0.82,0.83,0.84,0.85,0.86,0.87,0.88,0.89,0.89a,0.90,0.91,0.92,and avoid the version (,0.93],0.01,0.02,0.03,0.04,0.05,0.06,0.07,0.08,0.09,0.10,0.11,0.12,0.13,0.14,0.15,0.20,0.21,0.22,0.23,0.24,0.25,0.30,0.31,0.32,0.33,0.34,0.35,0.36,0.37,0.38,0.39,0.40,0.41,0.42,0.50,0.51,0.52,0.60,0.61,0.70,0.71,0.72,0.73,0.74,0.75,0.76,0.77,0.78,0.79,0.80,0.81,0.82,0.83,0.84,0.85,0.86,0.87,0.88,0.89,0.89a,0.90,0.91,0.92