CVE-2013-2176

CVE-2013-2176 is an unquoted Windows search path vulnerability in the Red Hat Enterprise Virtualization Application Provisioning Tool (RHEV-APT) installed via rhev-guest-tools-iso (v3.2). The unquoted path could allow a local, unprivileged user to have a Trojan horse binary executed with SYSTEM p...

Design/Logic Flaw

Untrusted search path vulnerability in Cisco Unified Communications Manager CUCM 7.1x through 9.11a allows local users to gain privileges by leveraging unspecified file-permission and environment-variable issues for privileged programs, aka Bug ID CSCui02276...

Design/Logic Flaw

Untrusted search path vulnerability in Cisco Unified Communications Manager CUCM 7.1x through 9.11a allows local users to gain privileges by leveraging unspecified file-permission and environment-variable issues for privileged programs, aka Bug ID CSCui02242...

Mozilla Firefox Multiple Vulnerabilities -01 Apr13 (Mac OS X)

This host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxmultvuln01apr13macosx.nasl 6074 2017-05-05 09:03:14Z teissa $ Mozilla Firefox Multiple Vulnerabilities -01 Apr13 Mac OS X Authors: Thanga Prakash S Copyright:...

Mozilla Thunderbird ESR Multiple Vulnerabilities -01 (Apr 2013) - Windows

Mozilla Thunderbird ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-5188

CVE-2012-5188 concerns mora Downloader before 1.0.0.1, where an untrusted search path can cause the launcher to execute a .exe via unspecified vectors. Multiple sources (NVD/Red Hat/JVN variants) confirm the flaw allows arbitrary code execution with the application’s privileges, tied to insecure ...

CVE-2012-0204

CVE-2012-0204 describes an untrusted search path (DLL preloading) vulnerability in IBM InfoSphere Information Server Import Export Manager. The root cause is a Trojan horse DLL in the current working directory enabling local privilege escalation when the Import Export Manager is installed on IBM ...

Design/Logic Flaw

Untrusted search path vulnerability in Entity Framework in ADO.NET in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, and 4 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .NET applicatio...

CVE-2012-5377

CVE-2012-5377 is an untrusted search path vulnerability in ActivePerl 5.16.1.1601 when installed in the top-level C:\ directory. The installation places a Trojan horse DLL in C:\Perl\Site\bin, which is added to PATH and can be used by a local attacker to gain privileges via a missing DLL (wlbsctr...

CVE-2012-4897

CVE-2012-4897 affects VMware Movie Decoder prior to 9.0. The advisory describes a binary planting vulnerability in the Movie Decoder installer that could let a local attacker run code by placing a malicious executable in the installer directory. VMware recommends upgrading to Movie Decoder 9.0 (a...

Design/Logic Flaw

Untrusted search path vulnerability in Altova DatabaseSpy 2011 Enterprise Edition SP1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .qprj file. NOTE: some of these details are obtained from...

Design/Logic Flaw

Untrusted search path vulnerability in CyberLink PowerDirector 7 allows local users to gain privileges via a Trojan horse mfc71loc.dll file in the current working directory, as demonstrated by a directory that contains a .pdl, .iso, .pds, .p2g, or .p2i file. NOTE: some of these details are obtain...

Design/Logic Flaw

Untrusted search path vulnerability in RealPlayer SP 1.1.5 12.0.0.879 allows local users to gain privileges via a Trojan horse rio500.dll file in the current working directory, as demonstrated by a directory that contains a .avi file. NOTE: some of these details are obtained from third party...

Design/Logic Flaw

Untrusted search path vulnerability in Amazon Kindle for PC 1.3.0 30884 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .azw file. NOTE: some of these details are obtained from third party...

CVE-2010-5247

CVE-2010-5247 involves QtWeb Browser 3.3 build 043 and an untrusted search path vulnerability. Local users can gain privileges by placing a Trojan horse wintab32.dll in the current working directory, demonstrated via a directory containing .html/.htm/.mhtml files. Affected component is the browse...

CVE-2010-5233

CVE-2010-5233 affects Virtual DJ 6.1.2 Trial b301 and is described as an untrusted search path vulnerability (DLL hijacking) where a trojan HDJAPI.dll placed in the current working directory can grant local privileges, demonstrated with a directory containing an mp3 file. This is the core technic...

CVE-2010-5256

CVE-2010-5256 affects CDisplay 1.8.1 and is described as an untrusted search path vulnerability that allows local privilege escalation via a Trojan horse TRACE32.DLL located in the current working directory, illustrated by a directory containing a .cba file. The available connected documents corr...

CVE-2010-5250

Pthreads-win32 2.8.0 is affected. The untrusted search path vulnerability in pthreadGC2.dll (function pthread_win32_process_attach_np) allows a local attacker to gain privileges by placing a Trojan horse quserex.dll in the current working directory. Impact: local privilege escalation. No patch/ve...

CVE-2010-5273

CVE-2010-5273 describes an untrusted search path privilege escalation in Altova DiffDog 2011 Enterprise Edition SP1. The issue arises when a malicious dwmapi.dll placed in the current working directory is loaded, demonstrated by a directory containing a .dbdif file, enabling local users to gain p...

CVE-2010-5263

CVE-2010-5263 affects Sothink SWF Decompiler 6.0 Build 610. The vulnerability is an untrusted search path issue that lets local users escalate privileges by placing a malicious dwmapi.dll in the current working directory, demonstrated by a directory containing a .flv file. This mirrors multiple v...