CVE-2010-5261

CVE-2010-5261 affects SnowFox Total Video Converter 2.5.1. The issue is an untrusted search path vulnerability that allows local users to gain privileges by placing a Trojan horse dwmapi.dll in the current working directory, demonstrated with a directory containing a .avi file. The root cause is ...

CVE-2010-5231

CVE-2010-5231 describes an untrusted search path vulnerability in DivX Player 7.2.019 that allows local privilege escalation via a Trojan horse VersionCheckDLL.dll placed in the current working directory, demonstrated by a directory containing a .avi file. The root cause is an DLL search order is...

CVE-2010-5227

Opera before 10.62 is affected by an untrusted search path vulnerability that allows local privilege escalation via a Trojan horse dwmapi.dll placed in the attacker’s current working directory, as demonstrated by directories containing .htm, .mht, .mhtml, .xht, .xhtm, or .xhtl files. The issue ex...

CVE-2010-5239

The CVE-2010-5239 issue affects DAEMON Tools Lite (v4.35.6.0091) and DAEMON Tools Pro Standard (v4.36.0309.0160). It is an untrusted search path/LPE vulnerability where a Trojan horse mfc80loc.dll in the current working directory can be loaded to escalate privileges (illustrated by a directory co...

CVE-2012-4866

Untrusted search path vulnerability in Xtreme RAT 3.5 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as the current working directory. NOTE: some of these details are obtained from third party...

CVE-2012-4866

CVE-2012-4866 describes an untrusted search path vulnerability in Xtreme RAT 3.5 that enables local users to execute arbitrary code via a Trojan horse dwmapi.dll located in the current working directory, i.e., a DLL hijacking scenario. The connected documents corroborate this, listing the same de...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in MindManager 2012 10.0.493 allow local users to gain privileges via a Trojan horse 1 ssgp.dll or 2 dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .mmap file. NOTE: some of these details are obtained...

Design/Logic Flaw

Untrusted search path vulnerability in PhotoImpact X3 13.00.0000.0 allows local users to gain privileges via a Trojan horse bwsconst.dll file in the current working directory, as demonstrated by a directory that contains a .ufp or .ufo file. NOTE: the provenance of this information is unknown; th...

Design/Logic Flaw

Untrusted search path vulnerability in KeePass Password Safe before 1.18 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .kdb file. NOTE: some of these details are obtained from third party information...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in SWiSH Max3 3.0 2009.11.30 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 SWiSHmax3res.dll file in the current working directory, as demonstrated by a directory that contains a .swi file. NOTE: some of these details are...

Design/Logic Flaw

Untrusted search path vulnerability in facebookplugin.fpi in the Facebook plug-in in Foxit Reader 5.3.1.0606 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .pdf file. NOTE: some of these...

CVE-2010-5211

CVE-2010-5211 affects ALSee 6.20.0.1. The issue is an untrusted search path that lets local users gain privileges via a Trojan horse patchani.dll placed in the current working directory, demonstrated by a directory containing various image file types. The impact is local privilege escalation; exp...

CVE-2010-5202

CVE-2010-5202 affects JetAudio 8.0.7.1000 Basic. It is described as an untrusted search path vulnerability that allows local users to gain privileges via a Trojan horse WNASPI32.DLL file placed in the current working directory, demonstrated with a directory containing a .mp3 file. The vulnerabili...

CVE-2010-5201

CVE-2010-5201 describes an untrusted search path vulnerability in MAGIX Samplitude Producer 11, allowing local privilege escalation when a malicious PlayRIplA6.dll in the current working directory is loaded, demonstrated with a directory that contains a .vip file. The root cause is the use of an ...

CVE-2010-5199

The CVE-2010-5199 entry describes an untrusted search path vulnerability in PhotoImpact X3 13.00.0000.0 that lets local users gain privileges by placing a malicious bwsconst.dll in the current working directory, triggered by a directory containing a .ufp or .ufo file. The root cause is an untrust...

CVE-2010-5220

CVE-2010-5220 affects MEO Encryption Software 2.02. It is an untrusted search path privilege-escalation vulnerability where a trojan dwmapi.dll in the current working directory can be loaded to gain local privileges (via a directory containing a .meo or .cry file). The provided sources describe t...

CVE-2010-5216

The CVE-2010-5216 issue affects LINGO 11.0.1.6 and 12.0.2.20, with an untrusted search path vulnerability that lets local users gain privileges via a Trojan horse myuser.dll in the current working directory, demonstrated by a directory containing a .ltf file. Root cause is untrusted search path h...

CVE-2010-5196

CVE-2010-5196 concerns KeePass Password Safe prior to 2.13, where an untrusted search path allows local privilege escalation via a Trojan horse DwmApi.dll in the current working directory when a .kdbx file is present. The issue is caused by loading a malicious DLL from the CWD, enabling a local u...

CVE-2011-5157

CVE-2011-5157: A local untrusted search path vulnerability in Attachmate Reflection before 14.1 SP1 allows local users to gain privileges by placing a Trojan horse DLL in the current working directory. This is the same family as CVE-2011-0107 and is tied to Attachmate Reflection’s Windows client....

Discuz X2. 5 the latest version of the proof of the path-vulnerability warning-the black bar safety net

! Vulnerability to prove: http://www.erdare.com/source/plugin/myrepeats/table/tablemyrepeats.php Solution: add! defined'INUC' && exit'Access Denied';...