Unscored severity · published Sep 16, 2011
CVE-2011-3503
Untrusted search path vulnerability in eSignal 10.6.2425.1208, and possibly other versions, allows local users, and possibly remote attackers, to execute arbitrary code and…
–
CVSS
4.3%
EPSS
No
On KEV
Description
Untrusted search path vulnerability in eSignal 10.6.2425.1208, and possibly other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse JRS_UT.dll that is located in the same folder as a .quo (QUOTE) file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.3% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
Esignal · Interactivedata
10.6.2425.1208 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3503
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3503
osvdb.org
http://osvdb.org/75458
Vendor Advisory
http://secunia.com/advisories/45966
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/69786
More from Esignal
–
CVE-2011-3494
WinSig.exe in eSignal 10.6.2425 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a long StyleTemplate element…