CVE-2010-3135

CVE-2010-3135 describes an untrusted search path vulnerability in Cisco Packet Tracer 5.2. A Trojan wintab32.dll placed in the same folder as a .pkt or .pkz file can be loaded, allowing local users and potentially remote attackers to execute arbitrary code via DLL hijacking. The vulnerability ari...

CVE-2010-3125

The CVE-2010-3125 issue affects TeamMate Audit Management Software Suite 8.0 patch 2, where an untrusted search path enables DLL hijacking via a Trojan horse mfc71enu.dll located in the same folder as a .tmx file. This allows local users or potentially remote attackers to execute arbitrary code. ...

CVE-2010-3136

Untrusted search path vulnerability in Skype 4.2.0.169 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wab32.dll that is located in the same folder as a .skype file...

CVE-2010-3137

CVE-2010-3137 targets Winamp 5.581 (and potentially other versions) via an untrusted search path: a Trojan wnaspi32.dll placed in the same folder as specific media files (.669, .aac, .aiff, .amf, .au, .avr, .b4s, .caf, .cda) can enable DLL hijacking and arbitrary code execution. The connected Ope...

CVE-2010-3133

CVE-2010-3133 affects Wireshark up to 1.0.15 and 1.2.0 up to 1.2.10. The issue is an untrusted search path that enables DLL hijacking (notably via airpcap.dll and similar DLLs) when located in the same folder as a file that launches Wireshark, allowing arbitrary code execution for local users and...

CVE-2010-3124

The CVE-2010-3124 issue affects VLC Media Player (Windows) versions 1.1.3 and earlier. The vulnerability arises from an untrusted search path where a Trojan horse wintab32.dll in the same folder as a .mp3 enables DLL hijacking and arbitrary code execution. Impact: local users, and possibly remote...

CVE-2010-3131

CVE-2010-3131 is an untrusted search path vulnerability in Firefox/SeaMonkey/Thunderbird where dwmapi.dll loaded from the current working directory can be exploited if a malicious HTML/EML file is opened. The issue occurs on Windows (not Linux per the sources) when the browser loads dwmapi.dll at...

CVE-2010-3127

Untrusted search path vulnerability in Adobe PhotoShop CS2 through CS5 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or Wintab32.dll that is located in the same folder as a PSD or other file that is...

CVE-2010-3137

Untrusted search path vulnerability in Nullsoft Winamp 5.581, and probably other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wnaspi32.dll that is located in the same folder as a .669, .aac, .aiff, .amf...

CVE-2010-3124

Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll that is located in the same folder as a .mp3 file...

CVE-2010-3128

Untrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .tvs or .tvc file...

CVE-2010-3130

Untrusted search path vulnerability in TechSmith Snagit all versions 10.x and 11.x allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a snag, snagcc, or snagprof file...

CVE-2010-3135

Untrusted search path vulnerability in Cisco Packet Tracer 5.2 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll that is located in the same folder as a .pkt or .pkz file...

CVE-2010-3132

Untrusted search path vulnerability in Adobe Dreamweaver CS5 11.0 build 4916, build 4909, and probably other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 mfc90loc.dll or 2 dwmapi.dll that is located i...

CVE-2010-3136

CVE-2010-3136 affects Skype on Windows (v4.2.0.169 and earlier). The vulnerability is an untrusted search path that enables DLL hijacking by a Trojan wab32.dll located in the same folder as a .skype file, allowing arbitrary code execution with local access (and potentially remote exposure). Multi...

CVE-2010-3131

Untrusted search path vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 on Windows XP allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via...

CVE-2010-3133

Untrusted search path vulnerability in Wireshark 0.8.4 through 1.0.15 and 1.2.0 through 1.2.10 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse airpcap.dll, and possibly other DLLs, that is located in the same folder...

CVE-2010-3132

Affected software: Adobe Dreamweaver CS5 (11.0) build 4916 and 4909, with likely other versions. Vulnerability type / root cause: Untrusted search path leading to DLL hijacking, where a Trojan horse DLL (mfc90loc.dll or dwmapi.dll) placed in the same folder as a file that automatically launches D...

CVE-2010-3130

Snagit DLL preloading vulnerability (CVE-2010-3130) affects TechSmith Snagit 10.x and 11.x. A malicious dwmapi.dll located in the same folder as a snag, snagcc, or snagprof file can be loaded, enabling arbitrary code execution via DLL hijacking when a user opens a crafted Snagit file from an atta...

CVE-2010-3126

Untrusted search path vulnerability in avast! Free Antivirus version 5.0.594 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse mfc90loc.dll that is located in the same folder as an avast license .avastlic...