CVE-2010-2368

Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

CVE-2010-2368

Summary: Lhaplus is vulnerable to a local untrusted search path issue in DLL loading. Root cause: insecure DLL search path allows a Trojan horse DLL in the current working directory to be loaded. Impact: local privilege escalation. Affected versions: Lhaplus before 1.58 (e.g., 1.57 and earlier). ...