CVE Daily

CVE-2005-4590

Spb Kiosk Engine 1.0.0.1 allows local users to bypass restrictions on allowed ap...

Medium CVSS 4.6

Overview

Spb Kiosk Engine 1.0.0.1 allows local users to bypass restrictions on allowed applications via (1) removable media containing a program that will execute because of the autorun setting and (2) applications that are able to invoke other applications, as demonstrated by a file: URL specifying a .exe file.

CWE: N/A Published: 2005-12-30T11:03:00.000
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 4.6 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags