CVE-2010-5212

CVE-2010-5212 describes an untrusted search path vulnerability in Adobe LiveCycle Designer ES2 9.0.0.20091029.1.612548 . An object named assisten_US.dll in the current working directory can be loaded, allowing local users to gain privileges through a Trojan horse file, as demonstrated by a direct...

CVE-2010-5224

CVE-2010-5224 is an untrusted search path vulnerability in Cool iPhone Ringtone Maker 2.2.3. Local users can gain privileges via a hijacked dwmapi.dll placed in the current working directory, demonstrated by a directory containing a .mp3 file. The available sources consistently describe the issue...

CVE-2010-5203

CVE-2010-5203 affects NCP Secure Enterprise Client before 9.21 Build 68, Secure Entry Client before 9.23 Build 18, and Secure Client – Juniper Edition before 9.23 Build 18. The issue is an untrusted search path privilege escalation where local users can gain privileges via Trojan horse files in t...

CVE-2011-5155

CVE-2011-5155 involves an untrusted search path vulnerability in Help & Manual 5.5.1 Build 1296. Local users can gain privileges by placing a Trojan horse ijl15.dll in the current working directory, with exploitation demonstrated via directories containing extensions such as .hmxz, .hmxp, .hmskin...

CVE-2010-5211

CVE-2010-5211 affects ALSee 6.20.0.1. The issue is an untrusted search path that lets local users gain privileges via a Trojan horse patchani.dll placed in the current working directory, demonstrated by a directory containing various image file types. The impact is local privilege escalation; exp...

CVE-2010-5199

The CVE-2010-5199 entry describes an untrusted search path vulnerability in PhotoImpact X3 13.00.0000.0 that lets local users gain privileges by placing a malicious bwsconst.dll in the current working directory, triggered by a directory containing a .ufp or .ufo file. The root cause is an untrust...

CVE-2010-5213

Untrusted search path vulnerability in Adobe LiveCycle Designer 8.2.1.3144.1.471865 allows local users to gain privileges via a Trojan horse .dll file in the current working directory, as demonstrated by a directory that contains a .tds file. NOTE: some of these details are obtained from third...

CVE-2010-5223

Multiple untrusted search path vulnerabilities in Phoenix Project Manager 2.1.0.8 allow local users to gain privileges via a Trojan horse 1 wbtrv32.dll or 2 w3btrv7.dll file in the current working directory, as demonstrated by a directory that contains a .ppx file. NOTE: some of these details are...

CVE-2010-5205

CVE-2010-5205 concerns untrusted search path vulnerabilities in e-press ONE Office Author, enabling local privilege escalation via Trojan horse DLLs (java_msci.dll or msci_java.dll) placed in the current working directory, demonstrated with a directory containing a .psw file. Connected records co...

CVE-2012-4757

CVE-2012-4757 describes multiple untrusted search path vulnerabilities in CyberLink StreamAuthor 4.0 build 3308 that allow local users to gain privileges by placing (1) mfc71loc.dll or (2) mfc71enu.dll in the current working directory, demonstrated via a directory containing a .sta or .stp file. ...

CVE-2012-4758

Multiple untrusted search path vulnerabilities in CyberLink PowerProducer 5.5.3.2325 allow local users to gain privileges via a Trojan horse 1 mfc71loc.dll or 2 mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .ppp or .rdf file. NOTE: the provenan...

CVE-2010-5220

CVE-2010-5220 affects MEO Encryption Software 2.02. It is an untrusted search path privilege-escalation vulnerability where a trojan dwmapi.dll in the current working directory can be loaded to gain local privileges (via a directory containing a .meo or .cry file). The provided sources describe t...

CVE-2011-5153

Untrusted search path vulnerability in FotoSlate 4.0 Build 146 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .plp file. NOTE: the provenance of this information is unknown; the details are...

CVE-2011-5152

CVE-2011-5152 involves multiple untrusted search path vulnerabilities in ACDSee Photo Editor 2008 5.x build 291 , enabling local users to gain privileges via a Trojan horse placed in the current working directory (specifically the files Wintab32.dll or CV11-DialogEditor.dll ) as shown by a direct...

CVE-2010-5225

CVE-2010-5225 concerns an untrusted search path vulnerability in Babylon 8.1.0 r16. A Trojan BESExtension.dll placed in the current working directory can be used by a local attacker to gain privileges, demonstrated by a directory containing a .bgl file. The issue hinges on DLL search order and th...

CVE-2010-5204

CVE-2010-5204 affects IBM Lotus Symphony 1.3.0 (20090908.0900). The issue is multiple untrusted search path vulnerabilities that enable local privilege escalation via Trojan horse DLLs eclipse_1114.dll or emser645mi.dll placed in the current working directory, demonstrated with directories contai...

CVE-2010-5201

CVE-2010-5201 describes an untrusted search path vulnerability in MAGIX Samplitude Producer 11, allowing local privilege escalation when a malicious PlayRIplA6.dll in the current working directory is loaded, demonstrated with a directory that contains a .vip file. The root cause is the use of an ...

CVE-2010-5221

Untrusted search path vulnerability in STDU Explorer 1.0.201 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory. NOTE: some of these details are obtained from third party information...

CVE-2010-5202

CVE-2010-5202 affects JetAudio 8.0.7.1000 Basic. It is described as an untrusted search path vulnerability that allows local users to gain privileges via a Trojan horse WNASPI32.DLL file placed in the current working directory, demonstrated with a directory containing a .mp3 file. The vulnerabili...

CVE-2011-5155

Untrusted search path vulnerability in Help & Manual 5.5.1 Build 1296 allows local users to gain privileges via a Trojan horse ijl15.dll file in the current working directory, as demonstrated by a directory that contains a .hmxz, .hmxp, .hmskin, .hmx, .hm3, .hpj, .hlp, or .chm file. NOTE: some of...