CVE-2010-5264

CVE-2010-5264 describes an untrusted search path vulnerability in Prof-UIS before 2.9.1, where local users can exploit a Trojan horse dwmapi.dll placed in the current working directory to gain privileges via the CExtDWM::CExtDWM method in ProfUIS290m.dll and ProfUIS290m-RDE.dll. Affected products...

CVE-2010-5264: Undefined Security Weakness

Untrusted search path vulnerability in the CExtDWM::CExtDWM method in ProfUIS290m.dll and ProfUIS290m-RDE.dll in Prof-UIS before 2.9.1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory. NOTE: some of these details are obtained from third par...

PT-2012-1474

Name of the Vulnerable Software and Affected Versions Prof-UIS versions prior to 2.9.1 Description The issue allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, due to an untrusted search path vulnerability in the CExtDWM::CExtDWM method in...

KLA10299 LPE vulnerability in Prof-UIS

An untrusted path vulnerability was found in Prof-UIS. By exploiting this vulnerability malicious users can gain priveleges. This vulnerability can be exploited locally via a DLL hijack. Original advisories Changelog Exploitation Related products Prof-UIS CVE list CVE-2010-5264 high Solution Upda...