CVE-2006-0229

CVE-2006-0229 concerns the Wehntrust Windows utility, vulnerable due to an unquoted Windows search path. A local attacker could create a malicious C:\program.exe that is executed when Wehntrust creates its autostart entry, potentially allowing privilege escalation. The CVSS data indicates local, ...

Microsoft Windows Drag-and-Drop vulnerability

It's possible to trick user to drag-n-drop malicious file into special for example autostart folder...