Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.9

DAEMON Tools can be tricked into running malicious files

CVE-2010-5239 · published 14 years ago
Summary

The DAEMON Tools Lite and Pro versions may load a harmful file placed in the same folder as a disc image. This can let a local user gain higher access on the computer. Move the software to a trusted location or update to a version that checks file locations before loading them.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
daemon-tools daemon_tools 4.35.6.0091
4.36.0309.0160
cpe:2.3:a:daemon-tools:daemon_tools:4.35.6.0091:*:lite:*:*:*:*:*
Original advisory text
Untrusted search path vulnerability in DAEMON Tools Lite 4.35.6.0091 and Pro Standard 4.36.0309.0160 allows local users to gain privileges via a Trojan horse mfc80loc.dll file in the current workin...
Untrusted search path vulnerability in DAEMON Tools Lite 4.35.6.0091 and Pro Standard 4.36.0309.0160 allows local users to gain privileges via a Trojan horse mfc80loc.dll file in the current working directory, as demonstrated by a directory that contains a .mds file. NOTE: some of these details are obtained from third party information.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
6.9 Medium
Exploitation
1% chance of attack within 30 days
Timeline
Published7 Sep 2012
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2010-5239 · NVD
Track software like this
Free during beta