CVE-2010-5274

CVE-2010-5274 affects PKWARE PKZIP (versions 12.50.0013 and earlier). The flaw is an untrusted search path/DLL hijack allowing local privilege escalation via a malicious dwmapi.dll placed in the current working directory. Connected sources (Red Hat, NVD, Kaspersky) confirm local exploitation and ...

KLA10321 LPE vulnerability in PKZIP

An untrusted path was found in PKZIP. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via a DLL hijack. Original advisories - Related products PKZIP CVE list CVE-2010-5274 high Solution Update to latest version Impacts PE Privilege...