Untrusted search path vulnerability in TortoiseSVN 1.6.10, Build 19898 and earlier allows…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-264.
Summary
Untrusted search path vulnerability in TortoiseSVN 1.6.10, Build 19898 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Tortoise. NOTE: this is only a vulnerability when a file extension is associated with TortoiseProc or TortoiseMerge, which is not the default.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 99
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:tigris:tortoisesvn:*:*:*:*:*:*:*:* | up to 1.6.10 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.1:*:*:*:*:*:*:* | 0.1 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.2:*:*:*:*:*:*:* | 0.2 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.3:*:*:*:*:*:*:* | 0.3 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.4:*:*:*:*:*:*:* | 0.4 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.5:*:*:*:*:*:*:* | 0.5 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.5.1:*:*:*:*:*:*:* | 0.5.1 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.6:*:*:*:*:*:*:* | 0.6 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.6.1:*:*:*:*:*:*:* | 0.6.1 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.7:*:*:*:*:*:*:* | 0.7 | Vulnerable | Tigris |
- cpe:2.3:a:tigris:tortoisesvn:*:*:*:*:*:*:*:* Versions up to 1.6.10 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.1:*:*:*:*:*:*:* Versions 0.1 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.2:*:*:*:*:*:*:* Versions 0.2 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.3:*:*:*:*:*:*:* Versions 0.3 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.4:*:*:*:*:*:*:* Versions 0.4 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.5:*:*:*:*:*:*:* Versions 0.5 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.5.1:*:*:*:*:*:*:* Versions 0.5.1 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.6:*:*:*:*:*:*:* Versions 0.6 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.6.1:*:*:*:*:*:*:* Versions 0.6.1 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.7:*:*:*:*:*:*:* Versions 0.7 Vulnerable ·Tigris
Show 89 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:tigris:tortoisesvn:0.8:*:*:*:*:*:*:* | 0.8 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.8.1:*:*:*:*:*:*:* | 0.8.1 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.9.1:*:*:*:*:*:*:* | 0.9.1 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.9.2:*:*:*:*:*:*:* | 0.9.2 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.10.0:*:*:*:*:*:*:* | 0.10.0 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.11.0:*:*:*:*:*:*:* | 0.11.0 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.11.2:*:*:*:*:*:*:* | 0.11.2 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.12:*:*:*:*:*:*:* | 0.12 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.12.1:*:*:*:*:*:*:* | 0.12.1 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.14:*:*:*:*:*:*:* | 0.14 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.15:*:*:*:*:*:*:* | 0.15 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.15.1:*:*:*:*:*:*:* | 0.15.1 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.15.2:*:*:*:*:*:*:* | 0.15.2 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.16:*:*:*:*:*:*:* | 0.16 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.17:*:*:*:*:*:*:* | 0.17 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.18:*:*:*:*:*:*:* | 0.18 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.19:*:*:*:*:*:*:* | 0.19 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.20:*:*:*:*:*:*:* | 0.20 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.20.1:*:*:*:*:*:*:* | 0.20.1 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.20.2:*:*:*:*:*:*:* | 0.20.2 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.21:*:*:*:*:*:*:* | 0.21 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.22:*:*:*:*:*:*:* | 0.22 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.23:*:*:*:*:*:*:* | 0.23 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.24:*:*:*:*:*:*:* | 0.24 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.25:*:*:*:*:*:*:* | 0.25 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:0.26:*:*:*:*:*:*:* | 0.26 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.0:*:*:*:*:*:*:* | 1.0 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.0.1:*:*:*:*:*:*:* | 1.0.1 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.0.2:*:*:*:*:*:*:* | 1.0.2 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.0.3:*:*:*:*:*:*:* | 1.0.3 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.0.4:*:*:*:*:*:*:* | 1.0.4 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.0.5:*:*:*:*:*:*:* | 1.0.5 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.0.6:*:*:*:*:*:*:* | 1.0.6 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.0.7:*:*:*:*:*:*:* | 1.0.7 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.0.8:*:*:*:*:*:*:* | 1.0.8 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.1.0:*:*:*:*:*:*:* | 1.1.0 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.1.0:rc1:*:*:*:*:*:* | 1.1.0 rc1 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.1.0:rc2:*:*:*:*:*:* | 1.1.0 rc2 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.1.1:*:*:*:*:*:*:* | 1.1.1 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.1.2:*:*:*:*:*:*:* | 1.1.2 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.1.3:*:*:*:*:*:*:* | 1.1.3 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.1.4:*:*:*:*:*:*:* | 1.1.4 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.1.5:*:*:*:*:*:*:* | 1.1.5 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.1.6:*:*:*:*:*:*:* | 1.1.6 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.1.7:*:*:*:*:*:*:* | 1.1.7 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.2.0:*:*:*:*:*:*:* | 1.2.0 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.2.1:*:*:*:*:*:*:* | 1.2.1 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.2.2:*:*:*:*:*:*:* | 1.2.2 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.2.3:*:*:*:*:*:*:* | 1.2.3 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.2.4:*:*:*:*:*:*:* | 1.2.4 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.2.5:*:*:*:*:*:*:* | 1.2.5 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.2.6:*:*:*:*:*:*:* | 1.2.6 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.3.0:*:*:*:*:*:*:* | 1.3.0 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.3.1:*:*:*:*:*:*:* | 1.3.1 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.3.2:*:*:*:*:*:*:* | 1.3.2 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.3.3:*:*:*:*:*:*:* | 1.3.3 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.3.4:*:*:*:*:*:*:* | 1.3.4 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.3.5:*:*:*:*:*:*:* | 1.3.5 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.4.0:*:*:*:*:*:*:* | 1.4.0 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.4.0:rc1:*:*:*:*:*:* | 1.4.0 rc1 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.4.1:*:*:*:*:*:*:* | 1.4.1 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.4.2:*:*:*:*:*:*:* | 1.4.2 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.4.3:*:*:*:*:*:*:* | 1.4.3 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.4.4:*:*:*:*:*:*:* | 1.4.4 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.4.5:*:*:*:*:*:*:* | 1.4.5 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.4.6:*:*:*:*:*:*:* | 1.4.6 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.4.7:*:*:*:*:*:*:* | 1.4.7 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.4.8:*:*:*:*:*:*:* | 1.4.8 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.5.0:*:*:*:*:*:*:* | 1.5.0 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.5.0:alpha1:*:*:*:*:*:* | 1.5.0 alpha1 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.5.0:beta1:*:*:*:*:*:* | 1.5.0 beta1 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.5.0:rc1:*:*:*:*:*:* | 1.5.0 rc1 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.5.0:rc2:*:*:*:*:*:* | 1.5.0 rc2 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.5.0:rc3:*:*:*:*:*:* | 1.5.0 rc3 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.5.1:*:*:*:*:*:*:* | 1.5.1 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.5.2:*:*:*:*:*:*:* | 1.5.2 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.5.3:*:*:*:*:*:*:* | 1.5.3 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.5.4:*:*:*:*:*:*:* | 1.5.4 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.5.5:*:*:*:*:*:*:* | 1.5.5 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.5.6:*:*:*:*:*:*:* | 1.5.6 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.5.7:*:*:*:*:*:*:* | 1.5.7 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.5.8:*:*:*:*:*:*:* | 1.5.8 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.5.9:*:*:*:*:*:*:* | 1.5.9 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.5.10:*:*:*:*:*:*:* | 1.5.10 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.6.0:*:*:*:*:*:*:* | 1.6.0 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.6.3:*:*:*:*:*:*:* | 1.6.3 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.6.4:*:*:*:*:*:*:* | 1.6.4 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.6.5:*:*:*:*:*:*:* | 1.6.5 | Vulnerable | Tigris |
| cpe:2.3:a:tigris:tortoisesvn:1.6.6:*:*:*:*:*:*:* | 1.6.6 | Vulnerable | Tigris |
- cpe:2.3:a:tigris:tortoisesvn:0.8:*:*:*:*:*:*:* Versions 0.8 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.8.1:*:*:*:*:*:*:* Versions 0.8.1 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.9.1:*:*:*:*:*:*:* Versions 0.9.1 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.9.2:*:*:*:*:*:*:* Versions 0.9.2 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.10.0:*:*:*:*:*:*:* Versions 0.10.0 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.11.0:*:*:*:*:*:*:* Versions 0.11.0 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.11.2:*:*:*:*:*:*:* Versions 0.11.2 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.12:*:*:*:*:*:*:* Versions 0.12 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.12.1:*:*:*:*:*:*:* Versions 0.12.1 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.14:*:*:*:*:*:*:* Versions 0.14 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.15:*:*:*:*:*:*:* Versions 0.15 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.15.1:*:*:*:*:*:*:* Versions 0.15.1 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.15.2:*:*:*:*:*:*:* Versions 0.15.2 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.16:*:*:*:*:*:*:* Versions 0.16 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.17:*:*:*:*:*:*:* Versions 0.17 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.18:*:*:*:*:*:*:* Versions 0.18 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.19:*:*:*:*:*:*:* Versions 0.19 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.20:*:*:*:*:*:*:* Versions 0.20 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.20.1:*:*:*:*:*:*:* Versions 0.20.1 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.20.2:*:*:*:*:*:*:* Versions 0.20.2 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.21:*:*:*:*:*:*:* Versions 0.21 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.22:*:*:*:*:*:*:* Versions 0.22 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.23:*:*:*:*:*:*:* Versions 0.23 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.24:*:*:*:*:*:*:* Versions 0.24 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.25:*:*:*:*:*:*:* Versions 0.25 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:0.26:*:*:*:*:*:*:* Versions 0.26 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.0.3:*:*:*:*:*:*:* Versions 1.0.3 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.0.4:*:*:*:*:*:*:* Versions 1.0.4 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.0.5:*:*:*:*:*:*:* Versions 1.0.5 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.0.6:*:*:*:*:*:*:* Versions 1.0.6 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.0.7:*:*:*:*:*:*:* Versions 1.0.7 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.0.8:*:*:*:*:*:*:* Versions 1.0.8 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.1.0:*:*:*:*:*:*:* Versions 1.1.0 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.1.0:rc1:*:*:*:*:*:* Versions 1.1.0 rc1 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.1.0:rc2:*:*:*:*:*:* Versions 1.1.0 rc2 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.1.1:*:*:*:*:*:*:* Versions 1.1.1 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.1.2:*:*:*:*:*:*:* Versions 1.1.2 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.1.3:*:*:*:*:*:*:* Versions 1.1.3 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.1.4:*:*:*:*:*:*:* Versions 1.1.4 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.1.5:*:*:*:*:*:*:* Versions 1.1.5 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.1.6:*:*:*:*:*:*:* Versions 1.1.6 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.1.7:*:*:*:*:*:*:* Versions 1.1.7 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.2.0:*:*:*:*:*:*:* Versions 1.2.0 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.2.1:*:*:*:*:*:*:* Versions 1.2.1 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.2.2:*:*:*:*:*:*:* Versions 1.2.2 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.2.3:*:*:*:*:*:*:* Versions 1.2.3 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.2.4:*:*:*:*:*:*:* Versions 1.2.4 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.2.5:*:*:*:*:*:*:* Versions 1.2.5 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.2.6:*:*:*:*:*:*:* Versions 1.2.6 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.3.0:*:*:*:*:*:*:* Versions 1.3.0 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.3.1:*:*:*:*:*:*:* Versions 1.3.1 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.3.2:*:*:*:*:*:*:* Versions 1.3.2 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.3.3:*:*:*:*:*:*:* Versions 1.3.3 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.3.4:*:*:*:*:*:*:* Versions 1.3.4 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.3.5:*:*:*:*:*:*:* Versions 1.3.5 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.4.0:*:*:*:*:*:*:* Versions 1.4.0 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.4.0:rc1:*:*:*:*:*:* Versions 1.4.0 rc1 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.4.1:*:*:*:*:*:*:* Versions 1.4.1 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.4.2:*:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.4.3:*:*:*:*:*:*:* Versions 1.4.3 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.4.4:*:*:*:*:*:*:* Versions 1.4.4 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.4.5:*:*:*:*:*:*:* Versions 1.4.5 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.4.6:*:*:*:*:*:*:* Versions 1.4.6 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.4.7:*:*:*:*:*:*:* Versions 1.4.7 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.4.8:*:*:*:*:*:*:* Versions 1.4.8 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.5.0:*:*:*:*:*:*:* Versions 1.5.0 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.5.0:alpha1:*:*:*:*:*:* Versions 1.5.0 alpha1 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.5.0:beta1:*:*:*:*:*:* Versions 1.5.0 beta1 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.5.0:rc1:*:*:*:*:*:* Versions 1.5.0 rc1 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.5.0:rc2:*:*:*:*:*:* Versions 1.5.0 rc2 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.5.0:rc3:*:*:*:*:*:* Versions 1.5.0 rc3 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.5.1:*:*:*:*:*:*:* Versions 1.5.1 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.5.2:*:*:*:*:*:*:* Versions 1.5.2 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.5.3:*:*:*:*:*:*:* Versions 1.5.3 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.5.4:*:*:*:*:*:*:* Versions 1.5.4 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.5.5:*:*:*:*:*:*:* Versions 1.5.5 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.5.6:*:*:*:*:*:*:* Versions 1.5.6 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.5.7:*:*:*:*:*:*:* Versions 1.5.7 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.5.8:*:*:*:*:*:*:* Versions 1.5.8 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.5.9:*:*:*:*:*:*:* Versions 1.5.9 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.5.10:*:*:*:*:*:*:* Versions 1.5.10 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.6.0:*:*:*:*:*:*:* Versions 1.6.0 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.6.3:*:*:*:*:*:*:* Versions 1.6.3 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.6.4:*:*:*:*:*:*:* Versions 1.6.4 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.6.5:*:*:*:*:*:*:* Versions 1.6.5 Vulnerable ·Tigris
- cpe:2.3:a:tigris:tortoisesvn:1.6.6:*:*:*:*:*:*:* Versions 1.6.6 Vulnerable ·Tigris
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2010-3199
- 2026-10-03 Alias added: GHSA-v4g6-jxjq-q8p5
References
More Tigris Tortoisesvn vulnerabilities
- TI-2024-20860 In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker… CVSS 3.1MEDIUM 5.9
Sources
- CVE-2010-3199 · CVE Program
- CVE-2010-3199 · NVD
- FIRST EPSS
- GHSA-v4g6-jxjq-q8p5 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences