CVE-2011-5155

Untrusted search path vulnerability in Help & Manual 5.5.1 Build 1296 allows local users to gain privileges via a Trojan horse ijl15.dll file in the current working directory, as demonstrated by a directory that contains a .hmxz, .hmxp, .hmskin, .hmx, .hm3, .hpj, .hlp, or .chm file. NOTE: some of...

CVE-2010-5195

CVE-2010-5195 affects Roxio MyDVD 9 and is described as an untrusted search path vulnerability. Local attackers can gain privileges by placing a Trojan horse HomeUtils9.dll in the current working directory, with the exploit demonstrated by a directory containing a .dmsd or .dmsm file. Root cause:...

CVE-2010-5216

The CVE-2010-5216 issue affects LINGO 11.0.1.6 and 12.0.2.20, with an untrusted search path vulnerability that lets local users gain privileges via a Trojan horse myuser.dll in the current working directory, demonstrated by a directory containing a .ltf file. Root cause is untrusted search path h...

CVE-2010-5209

CVE-2010-5209 describes multiple untrusted search path vulnerabilities in Nuance PDF Reader 6.0 that allow local users to gain privileges via a Trojan horse when a malicious DLL is placed in the current working directory (either dwmapi.dll or exceptiondumpdll.dll ) and a PDF is present in that di...

CVE-2010-5197

Untrusted search path vulnerability in Pixia 4.70j allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .pxa file. NOTE: some of these details are obtained from third party information...

CVE-2010-5224

Untrusted search path vulnerability in Cool iPhone Ringtone Maker 2.2.3 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .mp3 file. NOTE: some of these details are obtained from third party...

CVE-2010-5225

Untrusted search path vulnerability in Babylon 8.1.0 r16 allows local users to gain privileges via a Trojan horse BESExtension.dll file in the current working directory, as demonstrated by a directory that contains a .bgl file. NOTE: some of these details are obtained from third party information...

CVE-2010-5211

Untrusted search path vulnerability in ALSee 6.20.0.1 allows local users to gain privileges via a Trojan horse patchani.dll file in the current working directory, as demonstrated by a directory that contains a .ani, .bmp, .cal, .hdp, .jpe, .mac, .pbm, .pcx, .pgm, .png, .psd, .ras, .tga, or .tiff...

CVE-2010-5204

Multiple untrusted search path vulnerabilities in IBM Lotus Symphony 1.3.0 20090908.0900 allow local users to gain privileges via a Trojan horse 1 eclipse1114.dll or 2 emser645mi.dll file in the current working directory, as demonstrated by a directory that contains a .odm, .odt, .otp, .stc, .stw...

CVE-2010-5207

CVE-2010-5207 affects CelFrame Office 2008 Standard Edition. It is a local privilege escalation via untrusted search path: a Trojan horse can be introduced by placing (1) java_msci.dll or (2) msci_java.dll in the current working directory, demonstrated with a directory containing a .doc, .xls, or...

CVE-2011-5157

CVE-2011-5157: A local untrusted search path vulnerability in Attachmate Reflection before 14.1 SP1 allows local users to gain privileges by placing a Trojan horse DLL in the current working directory. This is the same family as CVE-2011-0107 and is tied to Attachmate Reflection’s Windows client....

CVE-2010-5217

The CVE-2010-5217 entry concerns TuneUp Utilities 2009 8.0.3310 and 2010 9.0.4600. The issue is a privilege-escalation vulnerability caused by untrusted search paths: local users can gain privileges by placing a Trojan horse file (either wscapi.dll or vclib32.dll) in the current working directory...

CVE-2010-5213

Untrusted search path vulnerability in Adobe LiveCycle Designer 8.2.1.3144.1.471865 allows local users to gain privileges via a Trojan horse .dll file placed in the current working directory, demonstrated by a directory containing a .tds file. Note: some details are from third party information. ...

CVE-2010-5200

KeePass Password Safe prior to 1.18 is vulnerable to an untrusted search path/LPE via a Trojan horse DLL placed in the current working directory, demonstrated by a directory containing a .kdb file. Affected products: KeePass Password Safe versions 1.17 and earlier. Root cause: DLL hijack in the c...

CVE-2010-5202

Untrusted search path vulnerability in JetAudio 8.0.7.1000 Basic allows local users to gain privileges via a Trojan horse WNASPI32.DLL file in the current working directory, as demonstrated by a directory that contains a .mp3 file. NOTE: some of these details are obtained from third party...

CVE-2010-5196

CVE-2010-5196 concerns KeePass Password Safe prior to 2.13, where an untrusted search path allows local privilege escalation via a Trojan horse DwmApi.dll in the current working directory when a .kdbx file is present. The issue is caused by loading a malicious DLL from the CWD, enabling a local u...

CVE-2012-4755

Untrusted search path vulnerability in SciTools Understand before 2.6 build 600 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .udb file. NOTE: some of these details are obtained from thir...

CVE-2010-5197

Summary: CVE-2010-5197 is an untrusted search path vulnerability affecting Pixia 4.70j that allows local users to gain privileges by placing a Trojan horse wintab32.dll in the current working directory and loading it when a .pxa file is present. The root cause is DLL hijacking via an insecure sea...

CVE-2010-5200

Untrusted search path vulnerability in KeePass Password Safe before 1.18 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .kdb file. NOTE: some of these details are obtained from third party information...

Mandriva Linux Security Advisory : wireshark (MDVSA-2011:138)

This advisory updates wireshark to the latest version 1.6.2, fixing several security issues : The prototreeadditem function in Wireshark 1.6.1, when the IKEv1 protocol dissector is used, allows user-assisted remote attackers to cause a denial of service infinite loop via vectors involving a...