CVE-2010-5246 - CVE House
Back to Database
Status published Medium CVE-2010-5246

Multiple untrusted search path vulnerabilities in Maxthon Browser 1.6.7.35 and...

Vulnerability Description

Multiple untrusted search path vulnerabilities in Maxthon Browser 1.6.7.35 and 2.5.15 allow local users to gain privileges via a Trojan horse (1) RSRC32.dll or (2) dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .html file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-5246

Credits & Attribution

No credits recorded in the NVD database.

References

More from maxthon

View All →
CVE-2019-16647
Unquoted Search Path in Maxthon 5.1.0 to 5.2.7 Browser for...
High 7.2
CVE-2014-1449
The Maxthon Cloud Browser application before 4.1.6.2000 for Android allows...
Medium 5
CVE-2009-3018
Maxthon Browser 3.0.0.145 Alpha with Ultramode does not properly block...
Medium 4.3
CVE-2009-3006
Maxthon Browser 2.5.3.80 UNICODE allows remote attackers to spoof the...
Medium 4.3
CVE-2008-3667
Stack-based buffer overflow in Maxthon Browser 2.0 and earlier allows...
Medium 6.8

Affected Vendor

Affected Software

maxthon browser
Vulnerable Versions:
1.6.7.35, 2.5.15

Timeline

Official Publish: September 7th, 2012
Last Modified: September 16th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.