371 matches found
CVE-2010-3148
Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .vsd, .vdx, .vst, or .vtx file, aka "Microsoft Visio Insecure Library Loading...
Design/Logic Flaw
Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .vsd, .vdx, .vst, or .vtx file, aka "Microsoft Visio Insecure Library Loading...
CVE-2010-3147
CVE-2010-3147 describes an untrusted search path vulnerability in Windows Address Book (wab.exe) where a Trojan horse wab32res.dll loaded from the current working directory can execute code. Affected: WAB/Windows Contacts components on Windows XP SP2/XP SP3, Server 2003 SP2, Vista SP1/SP2, Server...
CVE-2010-3146
CVE-2010-3146 corresponds to the Microsoft Groove 2007 insecure library loading vulnerability. Multiple OpenVAS/SecPod/SAINT entries confirm that Groove 2007 (SP2) loads untrusted libraries from the current working directory when opening .vcg or .gta files, specifically mso.dll or GroovePerfmon.d...
CVE-2010-3144
CVE-2010-3144 concerns an insecure library loading vulnerability in the Internet Connection Signup Wizard (ICSW) affecting Windows XP SP2/SP3 and Windows Server 2003 SP2. The root cause is untrusted search path handling that allows loading a Trojan horse DLL (smmscrpt.dll) from the current direct...
CVE-2010-3145
CVE-2010-3145 concerns the Windows Backup Manager insecure DLL loading in sdclt.exe (Backup Manager) on Windows Vista SP1/SP2. The vulnerability arises from untrusted search path loading a Trojan horse fveapi.dll located in the current working directory, triggered when opening a Windows Backup Ca...
CVE-2010-3147: Undefined Security Weakness
Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a Trojan horse wab32res.dll...
MS KB2269637: Insecure Library Loading Could Allow Remote Code Execution
The remote host is missing Microsoft KB2264107 or an associated registry change, which provides a mechanism for mitigating binary planting or DLL preloading attacks. Insecurely implemented applications look in their current working directory when resolving DLL dependencies. If a malicious DLL wit...
Adobe Reader < 7.1.0 / 8.1.2 Multiple Vulnerabilities
The version of Adobe Reader installed on the remote host is earlier than 8.1.2 or 7.1.0. Such versions are reportedly affected by multiple vulnerabilities : - A design error vulnerability may allow an attacker to gain control of a user's printer. - Multiple stack-based buffer overflows may allow ...
