Design/Logic Flaw

Multiple untrusted search path vulnerabilities in ACDSee Photo Editor 2008 5.x build 291 allow local users to gain privileges via a Trojan horse 1 Wintab32.dll or 2 CV11-DialogEditor.dll file in the current working directory, as demonstrated by a directory that contains a .apd file. NOTE: the...

Design/Logic Flaw

Untrusted search path vulnerability in Help & Manual 5.5.1 Build 1296 allows local users to gain privileges via a Trojan horse ijl15.dll file in the current working directory, as demonstrated by a directory that contains a .hmxz, .hmxp, .hmskin, .hmx, .hm3, .hpj, .hlp, or .chm file. NOTE: some of...

CVE-2010-5196

Untrusted search path vulnerability in KeePass Password Safe before 2.13 allows local users to gain privileges via a Trojan horse DwmApi.dll file in the current working directory, as demonstrated by a directory that contains a .kdbx file. NOTE: some of these details are obtained from third party...

CVE-2010-5198

CVE-2010-5198 affects Intuit QuickBooks 2010. The issue is described as multiple untrusted search path vulnerabilities that allow local privilege escalation when a malicious DLL is placed in the current working directory. Specifically, the vulnerable components are (1) dbicudtx11.dll, (2) mfc90en...

CVE-2012-4759

CVE-2012-4759 describes an untrusted search path vulnerability in Foxit Reader’s Facebook plug-in (facebook_plugin.fpi). A local attacker could gain privileges by placing a Trojan horse dwmapi.dll in the current working directory while Foxit Reader 5.3.1.0606 is running, as demonstrated by a dire...

CVE-2010-5221

CVE-2010-5221 describes an untrusted search path vulnerability in STDU Explorer 1.0.201 where a local attacker can gain privileges by placing a malicious dwmapi.dll in the current working directory. The root cause is loading a Trojan horse DLL from the process working directory, enabling local pr...

CVE-2010-5206

CVE-2010-5206 concerns multiple untrusted search path vulnerabilities in the product family named e-press ONE Office E-NoteTaker and E-Zip. The issue allows local users to gain privileges by placing Trojan horse DLLs (1) mfc71enu.dll or (2) mfc71loc.dll) in the current working directory, demonstr...

CVE-2010-5208

Multiple untrusted search path vulnerabilities in the 1 Presentation, 2 Writer, and 3 Spreadsheets components in Kingsoft Office 2010 6.6.0.2477 allow local users to gain privileges via a Trojan horse plgpf.dll file in the current working directory, as demonstrated by a directory that contains a...

CVE-2010-5198

Multiple untrusted search path vulnerabilities in Intuit QuickBooks 2010 allow local users to gain privileges via a Trojan horse 1 dbicudtx11.dll, 2 mfc90enu.dll, or 3 mfc90loc.dll file in the current working directory, as demonstrated by a directory that contains a .des, .qbo, or .qpg file. NOTE...

CVE-2010-5212

Untrusted search path vulnerability in Adobe LiveCycle Designer ES2 9.0.0.20091029.1.612548 allows local users to gain privileges via a Trojan horse objectassistenUS.dll file in the current working directory, as demonstrated by a directory that contains a .tds file. NOTE: the provenance of this...

CVE-2010-5220

Untrusted search path vulnerability in MEO Encryption Software 2.02 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .meo or .cry file. NOTE: some of these details are obtained from third part...

CVE-2010-5209

Multiple untrusted search path vulnerabilities in Nuance PDF Reader 6.0 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 exceptiondumpdll.dll file in the current working directory, as demonstrated by a directory that contains a .pdf file. NOTE: some of these details are...

CVE-2010-5214

CVE-2010-5214 affects Fotobook Editor 5.0 2.8.0.1 and is caused by an untrusted search path (DLL hijacking) where a Trojan horse Fwpuclnt.dll in the current working directory enables local privilege escalation, demonstrated by a directory containing a .dtp file. The provided sources corroborate t...

CVE-2010-5219

The CVE-2010-5219 issue affects SmartFTP 4.0.1140.0 and is caused by an untrusted search path where a Trojan horse dwmapi.dll in the current working directory can be loaded, enabling local privilege escalation. Documents consistently describe this as a local privilege vulnerability stemming from ...

CVE-2012-4756

CVE-2012-4756 affects CyberLink LabelPrint 2.5.3602, where local users can gain privileges via untrusted search path using (1) mfc71loc.dll or (2) mfc71enu.dll in the current working directory, demonstrated by a directory containing a .lpp file. The issue stems from untrusted search paths allowin...

CVE-2010-5216

Untrusted search path vulnerability in LINGO 11.0.1.6 and 12.0.2.20 allows local users to gain privileges via a Trojan horse myuser.dll file in the current working directory, as demonstrated by a directory that contains a .ltf file. NOTE: the provenance of this information is unknown; the details...

CVE-2010-5196

Untrusted search path vulnerability in KeePass Password Safe before 2.13 allows local users to gain privileges via a Trojan horse DwmApi.dll file in the current working directory, as demonstrated by a directory that contains a .kdbx file. NOTE: some of these details are obtained from third party...

CVE-2010-5223

Phoenix Project Manager 2.1.0.8 is affected by multiple untrusted search path vulnerabilities that allow local privilege escalation when a user places one of the DLLs (wbtrv32.dll or w3btrv7.dll) in the current working directory and opens a .ppx file. The issue relies on DLL search order in the p...

CVE-2012-4754

CVE-2012-4754 affects MindManager 2012 (version 10.0.493). The issue is an untrusted search path vulnerability where local users can gain privileges via a Trojan horse placed in the current working directory (notably using either ssgp.dll or dwmapi.dll), demonstrated by a directory containing a ....

CVE-2011-5154

The CVE-2011-5154 entry covers SAP GUI 6.4–7.2 with two vulnerable executables (SAPGui.exe and BExAnalyzer.exe). The issue is an untrusted search path that allows privilege escalation via a Trojan horse MFC80LOC.DLL in the current working directory, demonstrated by a directory containing a .sap f...