CVE-2010-3402: Undefined Security Weakness

Untrusted search path vulnerability in IDM Computer Solutions UltraEdit 16.20.0.1009, 16.10.0.1036, and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same...

Design/Logic Flaw

Untrusted search path vulnerability in TortoiseSVN 1.6.10, Build 19898 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Tortois...

CVE-2010-3199

CVE-2010-3199 describes an untrusted search path vulnerability in TortoiseSVN 1.6.10, Build 19898 and earlier . The issue allows local users, and possibly remote attackers, to execute arbitrary code and perform DLL hijacking via a Trojan horse dwmapi.dll located in the same folder as a file proce...

Mozilla Foundation Security Advisory 2010-52

Mozilla Foundation Security Advisory 2010-52 Title: Windows XP DLL loading vulnerability Impact: Critical Announced: September 7, 2010 Reporter: Haifei Li, Acros Security Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.9 Firefox 3.5.12 Thunderbird 3.1.3 Thunderbird 3.0.7 SeaMonkey...

CVE-2010-3199: Undefined Security Weakness

Untrusted search path vulnerability in TortoiseSVN 1.6.10, Build 19898 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Tortois...

SeaMonkey DLL Hijacking (dwmapi.dll) Exploit

Exploit for windows platform in category local exploits ============================================ SeaMonkey DLL Hijacking dwmapi.dll Exploit ============================================ / Exploit Title: SeaMonkey DLL Hijacking Exploit dwmapi.dll Date: 07/09/2010 Author: Anastasios Monachos...

Windows XP DLL loading vulnerability — Mozilla

Security researcher Haifei Li of FortiGuard Labs reported that Firefox could be used to load a malicious code library that had been planted on a victim's computer. Firefox attempts to load dwmapi.dll upon startup as part of its platform detection, so on systems that don't have this library, such ...

CVE-2010-3191

CVE-2010-3191 affects Adobe Captivate 5.0.0.596 (and possibly other versions). The vulnerability is an Insecure Library Loading/DLL hijacking issue caused by an untrusted search path: a Trojan dwmapi.dll placed in the same folder as a .cptx file can be loaded, enabling local users or remote attac...

CVE-2010-3191: Undefined Security Weakness

Untrusted search path vulnerability in Adobe Captivate 5.0.0.596, and possibly other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .cptx file. NOTE: the...

CVE-2010-3190: Untrusted Search Path

Untrusted search path vulnerability in the Microsoft Foundation Class MFC Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C++ 2005 SP1, 2008 SP1, and 2010; and Exchange Server 2010 Service Pack 3, 2013, and 2013 allows local users to gain...

Design/Logic Flaw

Untrusted search path vulnerability in Adobe ExtendScript Toolkit ESTK CS5 3.5.0.52 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .jsx file...

CVE-2010-3154

CVE-2010-3154 affects Adobe Extension Manager CS5 (version 5.0.298). The vulnerability arises from an untrusted search path where a Trojan horse dwmapi.dll placed in the same folder as a .mxi or .mxp file can enable DLL hijacking, allowing local users and potentially remote attackers to execute a...

CVE-2010-3155

Adobe ExtendScript Toolkit (ESTK) for CS5 3.5.0.52 is affected by an Untrusted Search Path vulnerability that enables DLL hijacking via a dwmapi.dll placed in the same folder as a .jsx file. The issue can allow local users, and possibly remote attackers, to execute arbitrary code. The root cause ...

CVE-2010-3155: Undefined Security Weakness

Untrusted search path vulnerability in Adobe ExtendScript Toolkit ESTK CS5 3.5.0.52 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .jsx file...

CVE-2010-3152: Undefined Security Weakness

Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or aires.dll that is located in the...

CVE-2010-3154: Undefined Security Weakness

Untrusted search path vulnerability in Adobe Extension Manager CS5 5.0.298 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .mxi or .mxp file...

CVE-2010-3128

Untrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .tvs or .tvc file...

Design/Logic Flaw

Untrusted search path vulnerability in Adobe PhotoShop CS2 through CS5 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or Wintab32.dll that is located in the same folder as a PSD or other file that is...

Design/Logic Flaw

Untrusted search path vulnerability in TechSmith Snagit all versions 10.x and 11.x allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a snag, snagcc, or snagprof file...

Firefox <= 3.6.8 DLL Hijacking Exploit [dwmapi.dll]

/ Exploit Title: Firefox = 3.6.8 DLL Hijacking Exploit dwmapi.dll Date: August 24, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: Latest Firefox v3.6.8 Tested on: Windows XP SP3 En Vulnerable extensions: .htm .html .jtx .mfp Greetz: Astalavista, OffSEC, Exploit-DB / include...