Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.9
CVE-2010-5207: CelFrame Office 2008 may let users gain higher privileges
CVE-2010-5207 · published 14 years ago
Summary
If a malicious file is placed in the same folder as a .doc, .xls or .odg document, CelFrame Office 2008 can load that file and give the attacker elevated rights on the computer. This could let a local user run code with more authority than intended. Apply any available updates, restrict write permissions to folders where documents are stored, and avoid opening documents from unknown sources.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| celframe | office_2008 |
All versions
cpe:2.3:a:celframe:office_2008:-:-:standard:*:*:*:*:* |
Original advisory text
Multiple untrusted search path vulnerabilities in CelFrame Office 2008 Standard Edition allow local users to gain privileges via a Trojan horse (1) java_msci.dll or (2) msci_java.dll file in the cu...
Multiple untrusted search path vulnerabilities in CelFrame Office 2008 Standard Edition allow local users to gain privileges via a Trojan horse (1) java_msci.dll or (2) msci_java.dll file in the current working directory, as demonstrated by a directory that contains a .doc, .xls, or .odg file. NOTE: some of these details are obtained from third party information.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Severity
6.9
Medium
Timeline
Published6 Sep 2012
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2010-5207 · NVD
Track software like this
Free during beta