CVE-2010-5208

CVE-2010-5208 affects Kingsoft Office 2010 (build 6.6.0.2477) components Presentation, Writer, and Spreadsheets. The root cause is untrusted search path/DLL hijacking via a Trojan horse plgpf.dll located in the current working directory, allowing local privilege escalation. Affected product detai...

CVE-2011-5156

CVE-2011-5156 describes an Untrusted search path vulnerability in Effective File Search 6.7, where local users can gain privileges by placing a Trojan horse ztvunrar36.dll in the current working directory, demonstrated via a directory containing an .efs file. Affected product is Effective File Se...

CVE-2010-5215

The CVE-2010-5215 entry concerns SWiSH Max3 3.0 (2009.11.30) with local privilege escalation via untrusted search paths. A Trojan horse can be introduced by placing (1) dwmapi.dll or (2) SWiSHmax3res.dll in the current working directory, demonstrated by a directory containing a .swi file. This cr...

CVE-2010-5219

Untrusted search path vulnerability in SmartFTP 4.0.1140.0 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .txt, .html, or .mpg file. NOTE: some of these details are obtained from third party...

CVE-2010-5217

Multiple untrusted search path vulnerabilities in TuneUp Utilities 2009 8.0.3310 and 2010 9.0.4600 allow local users to gain privileges via a Trojan horse 1 wscapi.dll or 2 vclib32.dll file in the current working directory, as demonstrated by a directory that contains a .tvs file. NOTE: the...

CVE-2012-4754

Multiple untrusted search path vulnerabilities in MindManager 2012 10.0.493 allow local users to gain privileges via a Trojan horse 1 ssgp.dll or 2 dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .mmap file. NOTE: some of these details are obtained...

CVE-2010-5214

Untrusted search path vulnerability in Fotobook Editor 5.0 2.8.0.1 allows local users to gain privileges via a Trojan horse Fwpuclnt.dll file in the current working directory, as demonstrated by a directory that contains a .dtp file. NOTE: some of these details are obtained from third party...

CVE-2011-5157

Untrusted search path vulnerability in Attachmate Reflection before 14.1 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, a related issue to CVE-2011-0107. NOTE: some of these details are obtained from third party information...

CVE-2012-4756

Multiple untrusted search path vulnerabilities in CyberLink LabelPrint 2.5.3602 allow local users to gain privileges via a Trojan horse 1 mfc71loc.dll or 2 mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .lpp file. NOTE: the provenance of this...

CVE-2010-5215

Multiple untrusted search path vulnerabilities in SWiSH Max3 3.0 2009.11.30 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 SWiSHmax3res.dll file in the current working directory, as demonstrated by a directory that contains a .swi file. NOTE: some of these details are...

CVE-2010-5201

CVE-2010-5201 describes an untrusted search path vulnerability in MAGIX Samplitude Producer 11, allowing local privilege escalation when a malicious PlayRIplA6.dll in the current working directory is loaded, demonstrated with a directory that contains a .vip file. The root cause is the use of an ...

CVE-2010-5218

CVE-2010-5218 affects Dupehunter 9.0.0.3911 and is described as an untrusted search path vulnerability that allows local privilege escalation via a Trojan horse Fwpuclnt.dll in the current working directory, demonstrated by a directory with a .dhjb file. Root cause: DLL search order trust issue. ...

CVE-2010-5210

CVE-2010-5210 affects Sorax Reader 2.0.3129.70. The root cause is an untrusted search path vulnerability that allows local users to gain privileges via a Trojan horse dwmapi.dll file placed in the current working directory, as demonstrated by a directory containing a .pdf file. The description in...

CVE-2012-4758

CVE-2012-4758 concerns CyberLink PowerProducer 5.5.3.2325, where multiple untrusted search path vulnerabilities allow local users to elevate privileges via Trojan horse files (mfc71loc.dll or mfc71enu.dll) placed in the current working directory, demonstrated by a directory containing a .ppp or ....

CVE-2010-5223

Multiple untrusted search path vulnerabilities in Phoenix Project Manager 2.1.0.8 allow local users to gain privileges via a Trojan horse 1 wbtrv32.dll or 2 w3btrv7.dll file in the current working directory, as demonstrated by a directory that contains a .ppx file. NOTE: some of these details are...

CVE-2011-5153

Untrusted search path vulnerability in FotoSlate 4.0 Build 146 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .plp file. NOTE: the provenance of this information is unknown; the details are...

CVE-2012-4755

CVE-2012-4755 affects SciTools Understand prior to version 2.6 build 600. The vulnerability arises from an untrusted search path: Understand looks in the current working directory for DLLs (notably wintab32.dll) when resolving dependencies, enabling local privilege escalation if a Trojan horse DL...

CVE-2010-5212

CVE-2010-5212 describes an untrusted search path vulnerability in Adobe LiveCycle Designer ES2 9.0.0.20091029.1.612548 . An object named assisten_US.dll in the current working directory can be loaded, allowing local users to gain privileges through a Trojan horse file, as demonstrated by a direct...

CVE-2010-5224

CVE-2010-5224 is an untrusted search path vulnerability in Cool iPhone Ringtone Maker 2.2.3. Local users can gain privileges via a hijacked dwmapi.dll placed in the current working directory, demonstrated by a directory containing a .mp3 file. The available sources consistently describe the issue...

CVE-2010-5203

CVE-2010-5203 affects NCP Secure Enterprise Client before 9.21 Build 68, Secure Entry Client before 9.23 Build 18, and Secure Client – Juniper Edition before 9.23 Build 18. The issue is an untrusted search path privilege escalation where local users can gain privileges via Trojan horse files in t...