XacRett 'explorer.exe' Executable Loading Arbitrary Code Execution Vulnerability

Bugtraq ID:	44125
Class:	Design Error
CVE:	CVE-2010-3157
Remote:	Yes
Local:	No
Published:	Oct 15 2010 12:00AM
Updated:	Oct 15 2010 12:00AM
Credit:	Mr. Makoto
Vulnerable:
Not Vulnerable:

XacRett 'explorer.exe' Executable Loading Arbitrary Code Execution Vulnerability

XacRett is prone to a vulnerability that lets attackers execute arbitrary code.

An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a specially crafted executable file.

XacRett 49 is vulnerable; other versions may also be affected.

XacRett 'explorer.exe' Executable Loading Arbitrary Code Execution Vulnerability

Attackers must trick a user into opening a file on a remote WebDAV or SMB share to exploit this issue.

XacRett 'explorer.exe' Executable Loading Arbitrary Code Execution Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

XacRett 'explorer.exe' Executable Loading Arbitrary Code Execution Vulnerability

References:

• XacRett file read vulnerability in the run (JVN)
  
• XacRett Homepage (XacRett )
  
• Xacrett vulnerability forty-nine (XacRett)