Design/Logic Flaw

Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka Bug ID CSCua28747...

CVE-2012-3052

The vulnerability CVE-2012-3052 affects Cisco VPN Client 5.x prior to 5.0.07.0440 and stems from untrusted DLL search path handling. An attacker with local access could place a Trojan DLL in the current working directory, which could be loaded and lead to privilege escalation. Publicly documented...

CVE-2012-3052

Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka Bug ID CSCua28747...