CVE-2010-5252
Untrusted search path vulnerability in HTTrack 3.43-9 allows local users to gain privileges via a...
Untrusted search path vulnerability in HTTrack 3.43-9 allows local users to gain privileges via a Trojan horse httrack-plugin.dll file in the current working directory, as demonstrated by a directory that contains a .whtt file. NOTE: some of these details are obtained from third party information.
Exploit likelihood
What each source reports
NVD Score used
Untrusted search path vulnerability in HTTrack 3.43-9 allows local users to gain privileges via a Trojan horse httrack-plugin.dll file in the current working directory, as demonstrated by a directory that contains a .whtt file. NOTE: some of these details are obtained from third party information.
- Record
CVE-2010-5252- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Untrusted search path vulnerability in HTTrack 3.43-9 allows local users to gain privileges via a Trojan horse httrack-plugin.dll file in the current working directory, as demonstrated by a directory that contains a .whtt file. NOTE: some of these details are obtained from third party information.
- Record
CVE-2010-5252- Updated
- 2026-11-02
EUVDEUVD-2010-5211 No score
Untrusted search path vulnerability in HTTrack 3.43-9 allows local users to gain privileges via a Trojan horse httrack-plugin.dll file in the current working directory, as demonstrated by a directory that contains a .whtt file. NOTE: some of these details are obtained from third party information.
- Record
EUVD-2010-5211- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g3r2-9725-84qv No score
Untrusted search path vulnerability in HTTrack 3.43-9 allows local users to gain privileges via a...
Untrusted search path vulnerability in HTTrack 3.43-9 allows local users to gain privileges via a Trojan horse httrack-plugin.dll file in the current working directory, as demonstrated by a directory that contains a .whtt file. NOTE: some of these details are obtained from third party information.
- Record
GHSA-g3r2-9725-84qv- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10580-1 No score
httrack-3.48.22-1.3 on GA media
These are all security issues fixed in the httrack-3.48.22-1.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10580-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
httrackopenSUSE:Tumbleweed From an advisory covering 4 CVEs |
before 3.48.22-1.3 | 3.48.22-1.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-5252 is a medium vulnerability (CVSS 6.9) in Httrack, published September 7, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. No source names a fixed version.
References
corelan.be/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list
secunia.com/advisories/41224
nvd.nist.gov/vuln/detail/CVE-2010-5252
github.com/advisories/GHSA-g3r2-9725-84qv
suse.com/security/cve/CVE-2004-0797