Analyst readout for executives and security teams
Plain-English summary
This is a local privilege risk in e-press ONE Office Author. If an attacker already has local access and can influence where a user opens a relevant file, the application may load an untrusted DLL from that folder. The bundle does not provide CVSS, fixed versions, or affected version details.
Executive priority
Treat as a legacy software exposure management item unless the product is still used in sensitive workflows. Prioritize removal or containment because source data does not confirm a patch path or affected versions.
Technical view
CVE-2010-5205 describes multiple untrusted search path issues in e-press ONE Office Author involving Java-related DLL loading from the current working directory, demonstrated with a directory containing a .psw file. The record notes some details come from third-party information.
Likely exposure
Exposure is limited to environments that still have e-press ONE Office Author installed and use affected file workflows. The source bundle does not identify versions, supported platforms, package names, or CPEs, so inventory validation is required.
Exploitation context
The bundle supports local exploitation only. There is no KEV listing and no cited evidence of active exploitation. Successful abuse appears to require local user context and a manipulated working directory or file-opening scenario.
Researcher notes
Evidence is sparse: affected vendor/product fields are n/a, severity is unknown, and the CVE record relies partly on third-party detail. Do not claim remote exploitation or active exploitation from this bundle.
Mitigation direction
- Check vendor or archived advisory guidance for fixed versions or recommended workarounds.
- Remove or retire e-press ONE Office Author where it is no longer required.
- Restrict users from opening untrusted .psw files or files from untrusted directories.
- Apply least privilege so local user compromise has limited business impact.
- Use application control to reduce unauthorized DLL loading where feasible.
Validation and detection
- Inventory endpoints for e-press ONE Office Author installations.
- Identify whether .psw file workflows are still used in the business.
- Review endpoint controls for DLL search path hardening and application control coverage.
- Check whether users can write to folders used for opening associated documents.
- Document compensating controls if no vendor fix can be confirmed.
Public sources used
Based on public source material and reviewed before publication.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2010-5205 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- 41404CVE reference · third-party-advisory, x_refsource_SECUNIA
- http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Be-press-one_office%5D_insecure_dll_hijackingCVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.