Vulnerability Details : CVE-2004-2359
Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0 does not properly drop SYSTEM privileges when started from the systray applet, which allows local users to gain privileges by accessing the Help functionality.
Products affected by CVE-2004-2359
- cpe:2.3:a:dell:truemobile_1300_wlan_mini-pci_card_util_trayapplet:3.10.39.0:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2004-2359
1.23%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 77 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2004-2359
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST |
References for CVE-2004-2359
-
http://securitytracker.com/id?1009174
Vendor Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/15285
Dell TrueMobile Help files allow attacker to gain privileges CVE-2004-2359 Vulnerability Report
-
http://www.securityfocus.com/bid/9714
-
http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0042.html
Vendor Advisory
-
http://secunia.com/advisories/10949
Vendor Advisory
Jump to