Design/Logic Flaw

Untrusted search path vulnerability in uTorrent 2.0.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse plugindll.dll, userenv.dll, shfolder.dll, dnsapi.dll, dwmapi.dll, iphlpapi.dll, dhcpcsvc.dll,...

CVE-2010-3124

The CVE-2010-3124 issue affects VLC Media Player (Windows) versions 1.1.3 and earlier. The vulnerability arises from an untrusted search path where a Trojan horse wintab32.dll in the same folder as a .mp3 enables DLL hijacking and arbitrary code execution. Impact: local users, and possibly remote...

CVE-2010-3131

CVE-2010-3131 is an untrusted search path vulnerability in Firefox/SeaMonkey/Thunderbird where dwmapi.dll loaded from the current working directory can be exploited if a malicious HTML/EML file is opened. The issue occurs on Windows (not Linux per the sources) when the browser loads dwmapi.dll at...

CVE-2010-3124

Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll that is located in the same folder as a .mp3 file...

CVE-2010-2929

The CVE-2010-2929 entry identifies an untrusted search path vulnerability in hsolinkcontrol (part of hsolink 1.0.118). The underlying issue is a modified PATH environment variable that is used when executing the programs route, mv, and cp, enabling local users to gain privileges through PATH mani...

CVE-2009-4081

Technical details for CVE-2009-4081 are not publicly available in the provided documents; the materials reference CVE-2009-3894 but do not supply affected product/version/root cause for CVE-2009-4081. Monitor for updates.

CVE-2009-0667

Untrusted search path vulnerability in Agent/Backend.pm in Ocsinventory-Agent before 0.0.9.3, and 1.x before 1.0.1, in OCS Inventory allows local users to gain privileges via a Trojan horse Perl module in an arbitrary directory...

CVE-2008-6558

Untrusted search path vulnerability in ReliantHA 1.1.4 (SCO UnixWare 7.1.4) affects hvdisp and rcvm. Local users can gain root privileges by setting RELIANT_PATH to a malicious bin/hvenv, exploiting an untrusted PATH search. Affected components: RELIANT_PATH environment variable usage in hvdisp/r...

Design/Logic Flaw

Untrusted search path vulnerability in src/ifpython.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySysSetArgv function CVE-2008-5983, as demonstrated ...

CVE-2008-5987

The CVE-2008-5987 entry concerns Eye of GNOME (eog) up to at least version 2.22.3, with a vulnerability in the Python interface. The issue arises from an untrusted search path: a Trojan horse Python file in the current working directory can be executed, due to the PySys_SetArgv function. This loc...

CVE-2008-2378

The CVE-2008-2378 issue concerns the hf HF kernel component (hfkernel) used by the hf package. The vulnerability is a local untrusted-search-path flaw that could allow privilege escalation via a Trojan horse killall executable found in a PATH directory, related to improper handling of the -k opti...

Design/Logic Flaw

Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to gain privileges via a Trojan Horse program in an unspecified directory that is associated with an insecure RPATH...

CVE-2008-4815

Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to gain privileges via a Trojan Horse program in an unspecified directory that is associated with an insecure RPATH...

Gentoo Security Advisory GLSA 200810-02 (portage)

The remote host is missing updates announced in advisory GLSA 200810-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2006-7234

CVE-2006-7234 affects Lynx prior to 2.8.6rel.4 and is an Untrusted search path vulnerability that allows local users to execute arbitrary code via malicious (1) .mailcap and (2) mime.types files in the current working directory. The MiracleLinux OSS advisories list this CVE and reference Lynx 2.8...

CVE-2008-3357

Untrusted search path vulnerability in ingvalidpw in Ingres 2.6, Ingres 2006 release 1 aka 9.0.4, and Ingres 2006 release 2 aka 9.1.0 on Linux and HP-UX allows local users to gain privileges via a crafted shared library, related to a "pointer overwrite vulnerability."...

Design/Logic Flaw

Untrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux Instrumentation for Manageability sblim libraries before 1-13a.el46.1 in Red Hat Enterprise Linux RHEL 4, and before 1-31.el52.1 in RHEL 5, allows local users to gain privileges via a malicious library...

CVE-2008-1951

Untrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux Instrumentation for Manageability sblim libraries before 1-13a.el46.1 in Red Hat Enterprise Linux RHEL 4, and before 1-31.el52.1 in RHEL 5, allows local users to gain privileges via a malicious library...

CVE-2008-1951

CVE-2008-1951 is an untrusted search path vulnerability in sblim libraries on Red Hat Enterprise Linux: an attacker could place a malicious libc.so in a directory in the RPATH under /var/tmp, enabling local privilege escalation. The issue is demonstrated via a malicious libc.so used by tog-pegasu...

CVE-2008-2366

OpenOffice.org on Red Hat Enterprise Linux 3/4 is affected by CVE-2008-2366 due to an insecure relative RPATH in the OpenOffice memory allocator path, allowing local privilege escalation via a malicious library in the user’s current working directory. The issue is documented in Red Hat RHSA-2008:...