CVE-2012-5459

Untrusted search path vulnerability in VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows allows host OS users to gain host OS privileges via a Trojan horse DLL in a "system folder."...

Design/Logic Flaw

Untrusted search path vulnerability in Entity Framework in ADO.NET in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, and 4 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .NET applicatio...

shopex v4. x proof of the physical path-vulnerability warning-the black bar safety net

Brief description: The buffer data file the content is too messy, syntax errors result in the explosion path Detailed description: /home/cache/cachedata.php the buffer data file broke the physical path Vulnerability proof: ! Repair solutions: Direct exit orweb serverforbidden error is returned...

CVE-2012-5380

Untrusted search path vulnerability in the installation functionality in Ruby 1.9.3-p194, when installed in the top-level C:\ directory, might allow local users to gain privileges via a Trojan horse DLL in the C:\Ruby193\bin directory, which may be added to the PATH system environment variable by...

CVE-2012-5377

CVE-2012-5377 is an untrusted search path vulnerability in ActivePerl 5.16.1.1601 when installed in the top-level C:\ directory. The installation places a Trojan horse DLL in C:\Perl\Site\bin, which is added to PATH and can be used by a local attacker to gain privileges via a missing DLL (wlbsctr...

CVE-2012-4897

CVE-2012-4897 affects VMware Movie Decoder prior to 9.0. The advisory describes a binary planting vulnerability in the Movie Decoder installer that could let a local attacker run code by placing a malicious executable in the installer directory. VMware recommends upgrading to Movie Decoder 9.0 (a...

Design/Logic Flaw

Untrusted search path vulnerability in Altova DatabaseSpy 2011 Enterprise Edition SP1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .qprj file. NOTE: some of these details are obtained from...

Design/Logic Flaw

Untrusted search path vulnerability in RealPlayer SP 1.1.5 12.0.0.879 allows local users to gain privileges via a Trojan horse rio500.dll file in the current working directory, as demonstrated by a directory that contains a .avi file. NOTE: some of these details are obtained from third party...

Design/Logic Flaw

Untrusted search path vulnerability in Amazon Kindle for PC 1.3.0 30884 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .azw file. NOTE: some of these details are obtained from third party...

Design/Logic Flaw

Untrusted search path vulnerability in CyberLink PowerDirector 7 allows local users to gain privileges via a Trojan horse mfc71loc.dll file in the current working directory, as demonstrated by a directory that contains a .pdl, .iso, .pds, .p2g, or .p2i file. NOTE: some of these details are obtain...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in 3DVIA Composer V6R2012 HF1 Build 6.8.1.1652 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 ibfs32.dll file in the current working directory, as demonstrated by a directory that contains a .smg file. NOTE: the provenance ...

CVE-2010-5256

CVE-2010-5256 affects CDisplay 1.8.1 and is described as an untrusted search path vulnerability that allows local privilege escalation via a Trojan horse TRACE32.DLL located in the current working directory, illustrated by a directory containing a .cba file. The available connected documents corr...

CVE-2010-5247

CVE-2010-5247 involves QtWeb Browser 3.3 build 043 and an untrusted search path vulnerability. Local users can gain privileges by placing a Trojan horse wintab32.dll in the current working directory, demonstrated via a directory containing .html/.htm/.mhtml files. Affected component is the browse...

CVE-2010-5233

CVE-2010-5233 affects Virtual DJ 6.1.2 Trial b301 and is described as an untrusted search path vulnerability (DLL hijacking) where a trojan HDJAPI.dll placed in the current working directory can grant local privileges, demonstrated with a directory containing an mp3 file. This is the core technic...

CVE-2010-5250

Pthreads-win32 2.8.0 is affected. The untrusted search path vulnerability in pthreadGC2.dll (function pthread_win32_process_attach_np) allows a local attacker to gain privileges by placing a Trojan horse quserex.dll in the current working directory. Impact: local privilege escalation. No patch/ve...

CVE-2010-5267

CVE-2010-5267 affects MunSoft Easy Office Recovery 1.1. An untrusted search path vulnerability allows local users to gain privileges via a Trojan horse dwmapi.dll loaded from the current working directory when a directory contains a .doc, .xls, or .ppt file. The root cause is a DLL search order h...

CVE-2010-5263

CVE-2010-5263 affects Sothink SWF Decompiler 6.0 Build 610. The vulnerability is an untrusted search path issue that lets local users escalate privileges by placing a malicious dwmapi.dll in the current working directory, demonstrated by a directory containing a .flv file. This mirrors multiple v...

CVE-2010-5273

CVE-2010-5273 describes an untrusted search path privilege escalation in Altova DiffDog 2011 Enterprise Edition SP1. The issue arises when a malicious dwmapi.dll placed in the current working directory is loaded, demonstrated by a directory containing a .dbdif file, enabling local users to gain p...

CVE-2010-5237

CVE-2010-5237 affects CyberLink PowerDirector 7. The vulnerability is an untrusted search path that allows local privilege elevation via a Trojan horse mfc71loc.dll placed in the current working directory. Exploitation is demonstrated by a directory containing a media project/file with extensions...

CVE-2010-5248

CVE-2010-5248 affects UltraVNC 1.0.8.2 and possibly earlier versions, where an untrusted search path allows local users to gain privileges via a Trojan horse vnclang.dll placed in the current working directory, demonstrated by a directory containing a .vnc file. The vulnerability is a local privi...