CVE-2010-5239

MEDIUM ⚠ Exploit

Untrusted search path vulnerability in DAEMON Tools Lite 4.35.6.0091 and Pro Standard 4.36.0309.0160 allows local users to gain privileges via a Trojan horse mfc80loc.dll file in the current workin...

Affects 1 product across 1 vendor.

CVSS 2.06.9
EPSS1.1%
Percentile64th
PatchUnknown
CVSS Vector — Plain English Requires local access.
◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2012. A medium severity vulnerability affects Daemon-Tools systems (CVE-2010-5239). Public exploit code is available. Isolate affected systems if patching is not feasible.

BSID: BS-2012-GLOBAL-171382-M • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2010-5239?
This vulnerability was disclosed in 2012. A medium severity vulnerability affects Daemon-Tools systems (CVE-2010-5239). Public exploit code is available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2010-5239?
CVE-2010-5239 has CVSS 6.9 (Medium). Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C. EPSS: 1.1%.
Is CVE-2010-5239 actively exploited?
Public exploit available for CVE-2010-5239. Exploitation risk elevated.
How do I remediate CVE-2010-5239?
Priority: MONITOR. PSIRT: [email protected]
What systems are affected by CVE-2010-5239?
CVE-2010-5239 affects Daemon-Tools Daemon Tools.
Vulnerability Details
CVE IDCVE-2010-5239
BSIDBS-2012-GLOBAL-171382-M BreachSpider Global ID
CVSS VectorAV:L/AC:M/Au:N/C:C/I:C/A:C
Published2012-09-07
Last Modified2026-06-16
ICS Relevance0%
SourceNVD
Official Description

Untrusted search path vulnerability in DAEMON Tools Lite 4.35.6.0091 and Pro Standard 4.36.0309.0160 allows local users to gain privileges via a Trojan horse mfc80loc.dll file in the current working directory, as demonstrated by a directory that contains a .mds file. NOTE: some of these details are obtained from third party information.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: Untrusted search path vulnerability in DAEMON Tools Lite 4.35.6.0091 and Pro Standard 4.36.0309.0160 allows local users to gain privileges via a Trojan horse mfc80loc.dll file in the current working directory, as demonstrated by a directory that contains a .mds file. NOTE: some of these details are obtained from third party information. CVSS vector: AV:L/AC:M/Au:N/C:C/I:C/A:C.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductAffected Versions
Daemon-Tools Daemon Tools 4.35.6.0091 4.36.0309.0160
Remediation

No official vendor advisory link on record. See the CVE record →

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 5151 Days
CISA known-exploitedNot in KEV catalog
Public Exploit⚠ Available — Reference
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash9d8f15d9d70fa0cd7f94b7bbc5bbe2b1fceb0155258d06ff5e924d75fe8df7be034caf98634fb3f13066ba289a1aa03169c228b050630d9d54c8d809728d290f
Related CVEs affecting Daemon-Tools
CVE-2026-8398 9.8 A supply chain attack compromised the official installation packages of DAEMO... CVE-2011-3987 4.9 dtsoftbus01.sys in DAEMON Tools Lite before 4.41.3, Pro Standard before 4.41....
View all Daemon-Tools CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →