CVE-2010-5257

CVE-2010-5257 describes local privilege escalation in ArchiCAD 13 and 14 due to untrusted search path vulnerabilities. An attacker can place a Trojan horse DLL (srcsrv.dll or GSAutoTester.DLL) in the current working directory, with a .2df file present, to trick the application into loading the at...

CVE-2010-5257: Undefined Security Weakness

Multiple untrusted search path vulnerabilities in ArchiCAD 13 and 14 allow local users to gain privileges via a Trojan horse 1 srcsrv.dll or 2 GSAutoTester.DLL file in the current working directory, as demonstrated by a directory that contains a .2df file. NOTE: some of these details are obtained...