CVE-2010-5240

Multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW X5 15.1.0.588 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 CrlRib.dll file in the current working directory, as demonstrated by a directory that contains a .cdr, .cpt, .cmx, or .csl file...

CVE-2010-5258

Untrusted search path vulnerability in Adobe Audition 3.0 build 7283.0 allows local users to gain privileges via a Trojan horse Assist.Dll file in the current working directory, as demonstrated by a directory that contains a .ses file. NOTE: some of these details are obtained from third party...

CVE-2010-5241

Multiple untrusted search path vulnerabilities in Autodesk AutoCAD 2010 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 IBFS32.DLL file in the current working directory, as demonstrated by a directory that contains a .dwg file. NOTE: the provenance of this information is...

CVE-2010-5254

Untrusted search path vulnerability in GFI Backup 3.1 Build 20100730 2009 Home Edition allows local users to gain privileges via a Trojan horse ArmAccess.dll file in the current working directory, as demonstrated by a directory that contains a .gbc or .gbt file. NOTE: some of these details are...

CVE-2010-5252

CVE-2010-5252 affects HTTrack up to version 3.43-9, where an untrusted search path allows local privilege escalation via a Trojan horse httrack-plugin.dll in the current working directory, demonstrated by a directory containing a .whtt file. Multiple vendors (Red Hat, SUSE, Debian) reference this...

CVE-2010-5230

CVE-2010-5230 affects MicroStation 7.1. Local privilege escalation via untrusted DLL search path vulnerability. The attacker can place one of four DLLs (mptools.dll, baseman.dll, wintab32.dll, or wintab.dll) in the current working directory, with a directory containing a .hln or .rdl file demonst...

CVE-2010-5231

CVE-2010-5231 describes an untrusted search path vulnerability in DivX Player 7.2.019 that allows local privilege escalation via a Trojan horse VersionCheckDLL.dll placed in the current working directory, demonstrated by a directory containing a .avi file. The root cause is an DLL search order is...

CVE-2010-5239

The CVE-2010-5239 issue affects DAEMON Tools Lite (v4.35.6.0091) and DAEMON Tools Pro Standard (v4.36.0309.0160). It is an untrusted search path/LPE vulnerability where a Trojan horse mfc80loc.dll in the current working directory can be loaded to escalate privileges (illustrated by a directory co...

CVE-2011-5158

Multiple untrusted search path vulnerabilities affect DATEV Grundpaket Basis CD23.20, specifically the DMTGUI2.EXE and DvInesLogFileViewer.Exe components. The issue allows local privilege escalation via a Trojan horse mechanism using one of two DLLs in the current working directory: DVBSKNLANG101...

CVE-2010-5243

CVE-2010-5243 : The provided documents identify a vulnerability in Cyberlink Power2Go 7.0.0.0816 caused by untrusted search paths. Local users can gain privileges via loading either dwmapi.dll or MFC71LOC.DLL from the current working directory, with exploitation demonstrated by directories contai...

CVE-2010-5227

Opera before 10.62 is affected by an untrusted search path vulnerability that allows local privilege escalation via a Trojan horse dwmapi.dll placed in the attacker’s current working directory, as demonstrated by directories containing .htm, .mht, .mhtml, .xht, .xhtm, or .xhtl files. The issue ex...

CVE-2010-5261

CVE-2010-5261 affects SnowFox Total Video Converter 2.5.1. The issue is an untrusted search path vulnerability that allows local users to gain privileges by placing a Trojan horse dwmapi.dll in the current working directory, demonstrated with a directory containing a .avi file. The root cause is ...

CVE-2010-5262

CVE-2010-5262 affects Gromada Multimedia Conversion Library 5.4.0 (libmcl-5.4.0.dll) with untrusted search path vulnerabilities enabling local privilege escalation via Trojan horse DLLs in the current working directory (libgif-1.1.0.dll or libhav-1.0.1.dll). The connected Red Hat/Redirection entr...

PT-2012-1460 · Unknown · Pthreads-Win32

Name of the Vulnerable Software and Affected Versions: Pthreads-win32 version 2.8.0 Description: The issue is related to an untrusted search path vulnerability in the pthread win32 process attach np function in pthreadGC2.dll. This allows local users to gain privileges via a Trojan horse...

Design/Logic Flaw

Untrusted search path vulnerability in Xtreme RAT 3.5 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as the current working directory. NOTE: some of these details are obtained from third party...

CVE-2012-4866

CVE-2012-4866 describes an untrusted search path vulnerability in Xtreme RAT 3.5 that enables local users to execute arbitrary code via a Trojan horse dwmapi.dll located in the current working directory, i.e., a DLL hijacking scenario. The connected documents corroborate this, listing the same de...

CVE-2012-4866

Untrusted search path vulnerability in Xtreme RAT 3.5 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as the current working directory. NOTE: some of these details are obtained from third party...

CVE-2012-4758

Multiple untrusted search path vulnerabilities in CyberLink PowerProducer 5.5.3.2325 allow local users to gain privileges via a Trojan horse 1 mfc71loc.dll or 2 mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .ppp or .rdf file. NOTE: the provenan...

CVE-2012-4756

Multiple untrusted search path vulnerabilities in CyberLink LabelPrint 2.5.3602 allow local users to gain privileges via a Trojan horse 1 mfc71loc.dll or 2 mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .lpp file. NOTE: the provenance of this...

CVE-2011-5156

Untrusted search path vulnerability in Effective File Search 6.7 allows local users to gain privileges via a Trojan horse ztvunrar36.dll file in the current working directory, as demonstrated by a directory that contains a .efs file. NOTE: the provenance of this information is unknown; the detail...