CVE-2010-5246

CVE-2010-5246 : Multiple untrusted search path vulnerabilities in Maxthon Browser versions 1.6.7.35 and 2.5.15 allow local users to gain privileges when a Trojan-horse DLL (RSRC32.dll or dwmapi.dll) exists in the current working directory. The issue is due to untrusted search paths and is demonst...

CVE-2012-4881

Untrusted search path vulnerability in moviEZ HD 1.0 Build 2554-29894-A allows local users to gain privileges via a Trojan horse avrt.dll file in the current working directory, as demonstrated by a directory that contains a .mvz file. NOTE: the provenance of this information is unknown; the detai...

CVE-2010-5249

The CVE-2010-5249 entry concerns an untrusted search path vulnerability in Sophos Free Encryption 2.40.1.1 and Sophos SafeGuard PrivateCrypto 2.40.1.2. The flaw lets local users gain privileges by placing a malicious pcrypt0406.dll in the current working directory, demonstrated via a directory co...

CVE-2010-5264

CVE-2010-5264 describes an untrusted search path vulnerability in Prof-UIS before 2.9.1, where local users can exploit a Trojan horse dwmapi.dll placed in the current working directory to gain privileges via the CExtDWM::CExtDWM method in ProfUIS290m.dll and ProfUIS290m-RDE.dll. Affected products...

CVE-2010-5257

CVE-2010-5257 describes local privilege escalation in ArchiCAD 13 and 14 due to untrusted search path vulnerabilities. An attacker can place a Trojan horse DLL (srcsrv.dll or GSAutoTester.DLL) in the current working directory, with a .2df file present, to trick the application into loading the at...

CVE-2010-5241

CVE-2010-5241 affects Autodesk AutoCAD 2010, where local users can gain privileges via untrusted search paths involving (1) dwmapi.dll or (2) IBFS32.DLL placed in the current working directory (demonstrated with a .dwg file). The connected records consistently cite the affected product and the tw...

CVE-2010-5263

CVE-2010-5263 affects Sothink SWF Decompiler 6.0 Build 610. The vulnerability is an untrusted search path issue that lets local users escalate privileges by placing a malicious dwmapi.dll in the current working directory, demonstrated by a directory containing a .flv file. This mirrors multiple v...

CVE-2010-5249

Untrusted search path vulnerability in Sophos Free Encryption 2.40.1.1 and Sophos SafeGuard PrivateCrypto 2.40.1.2 allows local users to gain privileges via a Trojan horse pcrypt0406.dll file in the current working directory, as demonstrated by a directory that contains a .uti file. NOTE: the...

CVE-2010-5260

Untrusted search path vulnerability in Agrin All DVD Ripper 4.0 allows local users to gain privileges via a Trojan horse wnaspi32.dll file in the current working directory, as demonstrated by a directory that contains a .ifo file. NOTE: some of these details are obtained from third party...

CVE-2010-5233

Untrusted search path vulnerability in Virtual DJ 6.1.2 Trial b301 allows local users to gain privileges via a Trojan horse HDJAPI.dll file in the current working directory, as demonstrated by a directory that contains a .mp3 file. NOTE: some of these details are obtained from third party...

CVE-2010-5234

Multiple untrusted search path vulnerabilities in Camtasia Studio 7.0.1 build 57 allow local users to gain privileges via a Trojan horse 1 MFC90ENU.DLL or 2 MFC90LOC.DLL file in the current working directory, as demonstrated by a directory that contains a .cmmp or .camrec file. NOTE: the provenan...

CVE-2010-5243

Multiple untrusted search path vulnerabilities in Cyberlink Power2Go 7.0.0.0816 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 MFC71LOC.DLL file in the current working directory, as demonstrated by a directory that contains a .p2g, .iso, .pdl, .pds, or .p2i file. NOTE:...

CVE-2010-5244

Untrusted search path vulnerability in SiSoftware Sandra 2010 Lite 2010.7.16.52 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .sis file. NOTE: some of these details are obtained from third...

CVE-2010-5271

Untrusted search path vulnerability in Altova MapForce 2011 Enterprise Edition SP1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .mfd file. NOTE: some of these details are obtained from thi...

CVE-2012-4883

Multiple untrusted search path vulnerabilities in 3DVIA Composer V6R2012 HF1 Build 6.8.1.1652 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 ibfs32.dll file in the current working directory, as demonstrated by a directory that contains a .smg file. NOTE: the provenance ...

CVE-2010-5238

Untrusted search path vulnerability in CyberLink PowerDirector 8.00.3022 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .pdl, .iso, .pds, .p2g, or .p2i file. NOTE: some of these details are...

CVE-2010-5272

Untrusted search path vulnerability in Altova DatabaseSpy 2011 Enterprise Edition SP1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .qprj file. NOTE: some of these details are obtained from...

CVE-2010-5261

Untrusted search path vulnerability in SnowFox Total Video Converter 2.5.1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .avi file. NOTE: some of these details are obtained from third party...

CVE-2010-5237

CVE-2010-5237 affects CyberLink PowerDirector 7. The vulnerability is an untrusted search path that allows local privilege elevation via a Trojan horse mfc71loc.dll placed in the current working directory. Exploitation is demonstrated by a directory containing a media project/file with extensions...

CVE-2010-5268

Untrusted search path vulnerability in Amazon Kindle for PC 1.3.0 30884 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .azw file. NOTE: some of these details are obtained from third party...