CVE-2012-2753 Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect (aka EPC) GUI in Check Point Endpoint Security R73.x and E80.x on the VPN blade platform, Endpoint Security VPN R75, Endpoint C...
MediumCVSS 6.9
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect (aka EPC) GUI in Check Point Endpoint Security R73.x and E80.x on the VPN blade platform, Endpoint Security VPN R75, Endpoint Connect R73.x, and Remote Access Clients E75.x allows local users to gain privileges via a Trojan horse DLL in the current working directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| checkpoint endpoint connect | = r73 | No fix listed |
| checkpoint endpoint security | = e80 | No fix listed |
| checkpoint endpoint security | = e80.10 | No fix listed |
| checkpoint endpoint security | = e80.20 | No fix listed |
| checkpoint endpoint security | = e80.30 | No fix listed |
| checkpoint endpoint security | = r73 | No fix listed |
| checkpoint endpoint security vpn | = r75 | No fix listed |
| checkpoint remote access clients | = e75 | No fix listed |
| checkpoint remote access clients | = e75.10 | No fix listed |
| checkpoint remote access clients | = e75.20 | No fix listed |
References
- 20120613 Security Advisory - Checkpoint Endpoint Connect VPN - DLL Hijack mailing-list
- supportcenter.checkpoint.com patch vendor-advisory