CVE-2010-3158

CVE-2010-3158 affects Lhaplus prior to 1.58 and is an untrusted search path vulnerability that allows local privilege escalation via a Trojan horse executable in the current working directory. Affected component/file: Lhaplus (untrusted search path handling). Impact described in sources: attacker...

CVE-2010-2368

Summary: Lhaplus is vulnerable to a local untrusted search path issue in DLL loading. Root cause: insecure DLL search path allows a Trojan horse DLL in the current working directory to be loaded. Impact: local privilege escalation. Affected versions: Lhaplus before 1.58 (e.g., 1.57 and earlier). ...

Design/Logic Flaw

Untrusted search path vulnerability in IDM Computer Solutions UltraEdit 16.20.0.1009, 16.10.0.1036, and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same...

QuickTime < 7.6.8 Multiple Vulnerabilities (Windows)

Binary data 801185.prm...

QuickTime < 7.6.8 Multiple Vulnerabilities (Windows) (deprecated)

Binary data 5665.prm...

CVE-2010-2600

CVE-2010-2600 affects BlackBerry Desktop Software. The vulnerability is an untrusted search path/DLL loading issue: a Trojan DLL located in the same folder as a processed file can lead to arbitrary code execution via DLL hijacking. Reported affected versions include BlackBerry Desktop Software up...

CVE-2010-2953

Technical details about CVE-2010-2953 (affected products, root cause, and fixes) are not publicly provided in the supplied documents; monitor for updates from vendors and security advisories.

Luftguitar CMS - Upload Arbitrary File

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-13-luftguitar-cms-vulnerability-upload-arbitrary-file/ ''' Abysssec Inc Public Advisory Title : Luftguitar CMS Vulnerability: Upload arbitrary...

CVE-2010-1805

The CVE-2010-1805 issue affects Apple Safari on Windows (Safari 4.x before 4.1.2 and 5.x before 5.0.2). The root cause is an untrusted search path: Safari launches Windows Explorer (explorer.exe) when showing the location of a downloaded file, using a search path that can include a directory cont...

CVE-2010-3144

Untrusted search path vulnerability in the Internet Connection Signup Wizard in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse smmscrpt.dll file in the current working directory, as demonstrated by a directory that contains an ISP or...

Design/Logic Flaw

Untrusted search path vulnerability in Adobe On Location CS4 Build 315 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ibfs32.dll that is located in the same folder as an OLPROJ file...

CVE-2010-3147

CVE-2010-3147 describes an untrusted search path vulnerability in Windows Address Book (wab.exe) where a Trojan horse wab32res.dll loaded from the current working directory can execute code. Affected: WAB/Windows Contacts components on Windows XP SP2/XP SP3, Server 2003 SP2, Vista SP1/SP2, Server...

CVE-2010-3152

CVE-2010-3152 affects Adobe Illustrator CS4/CS5 (14.0.0, 15.0.1 and earlier). It is caused by an untrusted search path allowing DLL hijacking via a Trojan horse dwmapi.dll or aires.dll located in the same folder as an .ait/.eps file, enabling arbitrary code execution. Affected versions include CS...

CVE-2010-3149

Untrusted search path vulnerability in Adobe Device Central CS5 3.0.0376, 3.0.1.0 3027, and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse qtcf.dll that is located in the same folder as an...

CVE-2010-3138

The CVE-2010-3138 issue affects Microsoft Windows XP SP3 with the Indeo Codec (iac25_32.ax) loading an insecure library (iacenc.dll) from the current working directory, enabling local privilege escalation via crafted .avi/.mka/.ra/.ram files (e.g., through players like BS.Player or Media Player C...

CVE-2010-3153

Untrusted search path vulnerability in Adobe InDesign CS4 6.0, InDesign CS5 7.0.2 and earlier, Adobe InDesign Server CS5 7.0.2 and earlier, and Adobe InCopy CS5 7.0.2 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a...

CVE-2010-3137

Untrusted search path vulnerability in Nullsoft Winamp 5.581, and probably other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wnaspi32.dll that is located in the same folder as a .669, .aac, .aiff, .amf...

CVE-2010-3128

Untrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .tvs or .tvc file...

Design/Logic Flaw

Untrusted search path vulnerability in uTorrent 2.0.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse plugindll.dll, userenv.dll, shfolder.dll, dnsapi.dll, dwmapi.dll, iphlpapi.dll, dhcpcsvc.dll,...

CVE-2010-3131

CVE-2010-3131 is an untrusted search path vulnerability in Firefox/SeaMonkey/Thunderbird where dwmapi.dll loaded from the current working directory can be exploited if a malicious HTML/EML file is opened. The issue occurs on Windows (not Linux per the sources) when the browser loads dwmapi.dll at...