Debian DSA-2107-1 : couchdb - untrusted search path

Dan Rosenberg discovered that in couchdb, a distributed, fault-tolerant and schema-free document-oriented database, an insecure library search path is used. A local attacker could execute arbitrary code by first dumping a maliciously crafted shared library in some directory, and then having an...

CVE-2010-3199

Untrusted search path vulnerability in TortoiseSVN 1.6.10, Build 19898 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Tortois...

CVE-2010-1805

Untrusted search path vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 on Windows allows local users to gain privileges via a Trojan horse explorer.exe aka Windows Explorer program in a directory containing a file that had been downloaded by Safari...

CVE-2010-3199

CVE-2010-3199 describes an untrusted search path vulnerability in TortoiseSVN 1.6.10, Build 19898 and earlier . The issue allows local users, and possibly remote attackers, to execute arbitrary code and perform DLL hijacking via a Trojan horse dwmapi.dll located in the same folder as a file proce...

Design/Logic Flaw

Untrusted search path vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 on Windows allows local users to gain privileges via a Trojan horse explorer.exe aka Windows Explorer program in a directory containing a file that had been downloaded by Safari...

CVE-2010-1805

Untrusted search path vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 on Windows allows local users to gain privileges via a Trojan horse explorer.exe aka Windows Explorer program in a directory containing a file that had been downloaded by Safari...

CVE-2010-1805

The CVE-2010-1805 issue affects Apple Safari on Windows (Safari 4.x before 4.1.2 and 5.x before 5.0.2). The root cause is an untrusted search path: Safari launches Windows Explorer (explorer.exe) when showing the location of a downloaded file, using a search path that can include a directory cont...

CVE-2010-1805

Removed by vendor...

[SECURITY] [DSA 2107-1] New couchdb package fixes arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-2107-1 [email protected] http://www.debian.org/security/ Sébastien Delafond Sep 9, 2010 http://www.debian.org/security/faq - -...

DSA-2107-1 couchdb - arbitrary code execution

Bulletin has no description...

CVE-2010-3191

Untrusted search path vulnerability in Adobe Captivate 5.0.0.596, and possibly other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .cptx file. NOTE: the...

Design/Logic Flaw

Untrusted search path vulnerability in Adobe Captivate 5.0.0.596, and possibly other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .cptx file. NOTE: the...

Design/Logic Flaw

Untrusted search path vulnerability in the Microsoft Foundation Class MFC Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C++ 2005 SP1, 2008 SP1, and 2010; and Exchange Server 2010 Service Pack 3, 2013, and 2013 allows local users to gain...

CVE-2010-3190

Untrusted search path vulnerability in the Microsoft Foundation Class MFC Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C++ 2005 SP1, 2008 SP1, and 2010; and Exchange Server 2010 Service Pack 3, 2013, and 2013 allows local users to gain...

CVE-2010-3191

Untrusted search path vulnerability in Adobe Captivate 5.0.0.596, and possibly other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .cptx file. NOTE: the...

CVE-2010-3153

Untrusted search path vulnerability in Adobe InDesign CS4 6.0, InDesign CS5 7.0.2 and earlier, Adobe InDesign Server CS5 7.0.2 and earlier, and Adobe InCopy CS5 7.0.2 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a...

CVE-2010-3152

Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or aires.dll that is located in the...

CVE-2010-3147

Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a Trojan horse wab32res.dll...

CVE-2010-3146

Multiple untrusted search path vulnerabilities in Microsoft Groove 2007 SP2 allow local users to gain privileges via a Trojan horse 1 mso.dll or 2 GroovePerfmon.dll file in the current working directory, as demonstrated by a directory that contains a Groove vCard .vcg or Groove Tool Archive .gta...

CVE-2010-3144

Untrusted search path vulnerability in the Internet Connection Signup Wizard in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse smmscrpt.dll file in the current working directory, as demonstrated by a directory that contains an ISP or...