Design/Logic Flaw

Untrusted search path vulnerability in Altova MapForce 2011 Enterprise Edition SP1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .mfd file. NOTE: some of these details are obtained from thi...

Design/Logic Flaw

Untrusted search path vulnerability in Sothink SWF Decompiler 6.0 Build 610 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .flv file. NOTE: some of these details are obtained from third part...

Design/Logic Flaw

Untrusted search path vulnerability in Altova DatabaseSpy 2011 Enterprise Edition SP1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .qprj file. NOTE: some of these details are obtained from...

Design/Logic Flaw

Untrusted search path vulnerability in Altova DiffDog 2011 Enterprise Edition SP1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .dbdif file. NOTE: some of these details are obtained from...

Design/Logic Flaw

Untrusted search path vulnerability in PKZIP before 12.50.0014 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .zip file. NOTE: some of these details are obtained from third party information...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in Maxthon Browser 1.6.7.35 and 2.5.15 allow local users to gain privileges via a Trojan horse 1 RSRC32.dll or 2 dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .html file. NOTE: the provenance of this...

Design/Logic Flaw

Untrusted search path vulnerability in VideoCharge Studio 2.9.0.632 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .vsc file. NOTE: some of these details are obtained from third party...

Design/Logic Flaw

Untrusted search path vulnerability in MunSoft Easy Office Recovery 1.1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .doc, .xls, or .ppt file. NOTE: some of these details are obtained from...

Design/Logic Flaw

Untrusted search path vulnerability in the CExtDWM::CExtDWM method in ProfUIS290m.dll and ProfUIS290m-RDE.dll in Prof-UIS before 2.9.1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory. NOTE: some of these details are obtained from third par...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in Cyberlink Power2Go 7.0.0.0816 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 MFC71LOC.DLL file in the current working directory, as demonstrated by a directory that contains a .p2g, .iso, .pdl, .pds, or .p2i file. NOTE:...

Design/Logic Flaw

Untrusted search path vulnerability in SnowFox Total Video Converter 2.5.1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .avi file. NOTE: some of these details are obtained from third party...

CVE-2012-4882

The CVE-2012-4882 entry affects 3D XML Player 6.212.13.12076. The root cause is untrusted search path vulnerabilities where local users can gain privileges by placing a Trojan-horse DLL in the current working directory (dwmapi.dll or JT0DevPhase.dll) and a .3dx file present in that directory. The...

CVE-2010-5266

Vulnerability CVE-2010-5266 affects VideoCharge Studio 2.9.0.632 via an untrusted search path that allows local users to gain privileges using a malicious dwmapi.dll placed in the current working directory (demonstrated with a .vsc file). The Red Hat and NVD entries corroborate the same Issue; no...

CVE-2010-5271

CVE-2010-5271 affects Altova MapForce 2011 Enterprise Edition SP1. The vulnerability is an untrusted search path/DLL hijacking issue where a malicious dwmapi.dll in the current working directory can be loaded, enabling local privilege escalation for users running the software. Root cause: loading...

CVE-2010-5266

Untrusted search path vulnerability in VideoCharge Studio 2.9.0.632 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .vsc file. NOTE: some of these details are obtained from third party...

CVE-2010-5263

Untrusted search path vulnerability in Sothink SWF Decompiler 6.0 Build 610 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .flv file. NOTE: some of these details are obtained from third part...

CVE-2010-5273

Untrusted search path vulnerability in Altova DiffDog 2011 Enterprise Edition SP1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .dbdif file. NOTE: some of these details are obtained from...

CVE-2010-5267

Untrusted search path vulnerability in MunSoft Easy Office Recovery 1.1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .doc, .xls, or .ppt file. NOTE: some of these details are obtained from...

CVE-2010-5238

CVE-2010-5238 describes an untrusted search path (DLL hijacking) vulnerability in CyberLink PowerDirector 8.00.3022, where local users can gain privileges by placing a malicious dwellmapi.dll (dwmapi.dll) in the current working directory. The issue is demonstrated using directories containing fil...

CVE-2010-5246

CVE-2010-5246 : Multiple untrusted search path vulnerabilities in Maxthon Browser versions 1.6.7.35 and 2.5.15 allow local users to gain privileges when a Trojan-horse DLL (RSRC32.dll or dwmapi.dll) exists in the current working directory. The issue is due to untrusted search paths and is demonst...