CVE-2010-5235

Untrusted search path vulnerability in IZArc Archiver 4.1.2 allows local users to gain privileges via a Trojan horse ztv7z.dll file in the current working directory, as demonstrated by a directory that contains a .arj file. NOTE: some of these details are obtained from third party information...

CVE-2010-5232

Untrusted search path vulnerability in DivX Plus Player 8.1.0 allows local users to gain privileges via a Trojan horse ssleay32.dll file in a certain directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-5244

CVE-2010-5244 involves untrusted search path vulnerability in SiSoftware Sandra 2010 Lite (version 2010.7.16.52). The root cause is that a Trojan horse dwmapi.dll placed in the current working directory can be loaded, enabling local users to gain privileges, as demonstrated by a directory contain...

CVE-2010-5263

Untrusted search path vulnerability in Sothink SWF Decompiler 6.0 Build 610 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .flv file. NOTE: some of these details are obtained from third part...

CVE-2012-4881

CVE-2012-4881 affects moviEZ HD 1.0 Build 2554-29894-A. It is an untrusted search path vulnerability where local users can gain privileges by placing a Trojan horse avrt.dll in the current working directory, demonstrated by a directory containing a .mvz file. Provenance is unknown; information co...

CVE-2010-5229

010 Editor is affected (versions 3.1.2 and earlier). It suffers an untrusted search path/LPE flaw: a malicious wintab32.dll in the current working directory can be loaded, enabling local privilege escalation via a DLL hijack. Root cause identified as DLL search order exploitation. Remediation per...

CVE-2010-5250

Pthreads-win32 2.8.0 is affected. The untrusted search path vulnerability in pthreadGC2.dll (function pthread_win32_process_attach_np) allows a local attacker to gain privileges by placing a Trojan horse quserex.dll in the current working directory. Impact: local privilege escalation. No patch/ve...

CVE-2010-5234

CVE-2010-5234 affects Camtasia Studio 7.0.1 build 57. The issue is an untrusted search path/ DLL hijacking vulnerability: local users can gain privileges by placing (1) MFC90ENU.DLL or (2) MFC90LOC.DLL in the current working directory, demonstrated via a directory containing a .cmmp or .camrec fi...

CVE-2010-5248

Untrusted search path vulnerability in UltraVNC 1.0.8.2 allows local users to gain privileges via a Trojan horse vnclang.dll file in the current working directory, as demonstrated by a directory that contains a .vnc file. NOTE: some of these details are obtained from third party information...

CVE-2012-4880

CVE-2012-4880 affects DVD Architect Pro 5.2 Build 133 and DVD Architect Studio 5.0 Build 156, due to multiple untrusted search path vulnerabilities. An attacker-local privilege escalation is possible when a malicious enc_mp2v.200 or CFHDDecoder.dll is placed in the current working directory, as d...

CVE-2010-5256

CVE-2010-5256 affects CDisplay 1.8.1 and is described as an untrusted search path vulnerability that allows local privilege escalation via a Trojan horse TRACE32.DLL located in the current working directory, illustrated by a directory containing a .cba file. The available connected documents corr...

CVE-2010-5246

Multiple untrusted search path vulnerabilities in Maxthon Browser 1.6.7.35 and 2.5.15 allow local users to gain privileges via a Trojan horse 1 RSRC32.dll or 2 dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .html file. NOTE: the provenance of this...

CVE-2010-5260

CVE-2010-5260 describes an untrusted search path (DLL hijacking) vulnerability in Agrin All DVD Ripper 4.0. A local attacker can gain privileges by placing a malicious wnaspi32.dll in the current working directory, demonstrated using a directory containing an .ifo file. Affected component/file: w...

CVE-2010-5233

CVE-2010-5233 affects Virtual DJ 6.1.2 Trial b301 and is described as an untrusted search path vulnerability (DLL hijacking) where a trojan HDJAPI.dll placed in the current working directory can grant local privileges, demonstrated with a directory containing an mp3 file. This is the core technic...

CVE-2010-5251

Multiple untrusted search path vulnerabilities in IBM Lotus Notes 8.5 allow local users to gain privileges via a Trojan horse 1 nnoteswc.dll or 2 nlsxbe.dll file in the current working directory, as demonstrated by a directory that contains a .vcf, .vcs, or .ics file. NOTE: the provenance of this...

CVE-2010-5242

The CVE-2010-5242 entry describes an untrusted search path (DLL hijacking) vulnerability in Sound Forge Pro 10.0b Build 474. Local users can gain privileges via a Trojan horse MtxParhVegasPreview.dll placed in the current working directory, demonstrated with a directory containing a .sfw file. Th...

CVE-2010-5259

CVE-2010-5259 affects IsoBuster 2.8. The vulnerability arises from untrusted search path handling where local users can privilege escalate by placing a Trojan horse wnaspi32.dll or ntaspi32.dll in the current working directory (demonstrated with a directory containing a .img file). This entry doc...

CVE-2010-5251

The CVE-2010-5251 entry concerns IBM Lotus Notes 8.5 with privilege escalation via untrusted search paths. A local user can gain privileges through Trojan horse DLLs (nnoteswc.dll or nlsxbe.dll) placed in the current working directory, demonstrated by a directory containing a .vcf, .vcs, or .ics ...

CVE-2012-4882

The CVE-2012-4882 entry affects 3D XML Player 6.212.13.12076. The root cause is untrusted search path vulnerabilities where local users can gain privileges by placing a Trojan-horse DLL in the current working directory (dwmapi.dll or JT0DevPhase.dll) and a .3dx file present in that directory. The...

CVE-2010-5271

CVE-2010-5271 affects Altova MapForce 2011 Enterprise Edition SP1. The vulnerability is an untrusted search path/DLL hijacking issue where a malicious dwmapi.dll in the current working directory can be loaded, enabling local privilege escalation for users running the software. Root cause: loading...