235 matches found
Design/Logic Flaw
Untrusted search path vulnerability in 7-Technologies 7T Interactive Graphical SCADA System IGSS before 9.0.0.11291 allows local users to gain privileges via a Trojan horse DLL in the current working directory...
KLA10170 LPE vulnerability in Emacs
An untrusted path vulnerability was found in GNU Emacs. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via a specially designed Lisp expression. Original advisories - Related products GNU-Emacs CVE list CVE-2012-0035 critical...
KLA10304 LPE vulnerability in RSA SecurID Software Token
An untrusted path vulnerability was found in the RSA SecurID Software Token. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via a DLL hijack. Original advisories - Related products RSA-SecurID-Software-Token CVE list CVE-2011-4141...
CVE-2011-2019
Untrusted search path vulnerability in Microsoft Internet Explorer 9 on Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an HTML file, aka...
CVE-2011-3360
Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory...
CVE-2010-4833
Untrusted search path vulnerability in modules/engines/ms-windows/xptheme.c in GTK+ before 2.24.0 allows local users to gain privileges via a Trojan horse uxtheme.dll file in the current working directory, a different vulnerability than CVE-2010-4831...
PT-2011-1767 · Gtk+ Team · Gtk+
Name of the Vulnerable Software and Affected Versions: GTK+ versions prior to 2.21.8 Description: The issue is related to an untrusted search path vulnerability. It allows local users to gain privileges via a Trojan horse Wintab32.dll file in the current working directory. Recommendations: For...
PT-2011-1194 · Gnu +1 · Glibc +1
Name of the Vulnerable Software and Affected Versions: glibc versions prior to 2.15-r3 GNU C Library glibc versions 2.5-49.el5 5.6 GNU C Library glibc versions 2.12-1.7.el6 0.3 Description: The issue concerns multiple vulnerabilities in the glibc package, which can lead to breaches of...
flash-plugin: multiple code execution flaws (APSB11-02)
Untrusted search path vulnerability in Adobe Flash Player before 10.2.152.26 allows local users to gain privileges via a Trojan horse DLL in the current working directory...
KLA10246 LPE vulnerability in Lunascape
An untrusted path vulnerability was found in Lunascape. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via DLL hijacking. Original advisories - Related products Lunascape CVE list CVE-2011-0452 high Solution Update to latest versi...
acroread: critical APSB11-03
Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2011-0570 and CVE-2011-0588...
CVE-2011-0575
Untrusted search path vulnerability in Adobe Flash Player before 10.2.152.26 allows local users to gain privileges via a Trojan horse DLL in the current working directory...
KLA10219 ACE vulnerability in ImgBurn
An untrusted path vulnerability was found in ImgBurn. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via DLL hijacking. Original advisories - Related products ImgBurn CVE list CVE-2011-0403 critical Solution Update to late...
PT-2010-5200 · Microsoft · Windows Server 2003 +4
Name of the Vulnerable Software and Affected Versions: Windows Media Encoder 9 versions on Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 Description: The issue allows local users to gain privileges via a Trojan horse DLL...
CVE-2010-4167
Untrusted search path vulnerability in configure.c in ImageMagick before 6.6.5-5, when MAGICKCOREINSTALLEDSUPPORT is defined, allows local users to gain privileges via a Trojan horse configuration file in the current working directory...
CVE-2010-4167
Untrusted search path vulnerability in configure.c in ImageMagick before 6.6.5-5, when MAGICKCOREINSTALLEDSUPPORT is defined, allows local users to gain privileges via a Trojan horse configuration file in the current working directory...
KLA10043 LPE vulnerability in 010 Editor
An untrusted path vulnerability was found at 010 Editor. Malicious users can exploit this vulnerability to gain privileges via a DLL hijack. Original advisories Vulnerability description Release note Related products 010-Editor CVE list CVE-2010-5229 high Solution Update to latest version Impacts...
CVE-2010-3163
Untrusted search path vulnerability in Fenrir Sleipnir before 2.9.5 and Grani before 4.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory...