CVE-2010-5273

Untrusted search path vulnerability in Altova DiffDog 2011 Enterprise Edition SP1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .dbdif file. NOTE: some of these details are obtained from...

CVE-2010-5266

Untrusted search path vulnerability in VideoCharge Studio 2.9.0.632 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .vsc file. NOTE: some of these details are obtained from third party...

CVE-2010-5267

Untrusted search path vulnerability in MunSoft Easy Office Recovery 1.1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .doc, .xls, or .ppt file. NOTE: some of these details are obtained from...

CVE-2012-4882

The CVE-2012-4882 entry affects 3D XML Player 6.212.13.12076. The root cause is untrusted search path vulnerabilities where local users can gain privileges by placing a Trojan-horse DLL in the current working directory (dwmapi.dll or JT0DevPhase.dll) and a .3dx file present in that directory. The...

CVE-2010-5263

Untrusted search path vulnerability in Sothink SWF Decompiler 6.0 Build 610 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .flv file. NOTE: some of these details are obtained from third part...

CVE-2010-5246

CVE-2010-5246 : Multiple untrusted search path vulnerabilities in Maxthon Browser versions 1.6.7.35 and 2.5.15 allow local users to gain privileges when a Trojan-horse DLL (RSRC32.dll or dwmapi.dll) exists in the current working directory. The issue is due to untrusted search paths and is demonst...

CVE-2010-5263

CVE-2010-5263 affects Sothink SWF Decompiler 6.0 Build 610. The vulnerability is an untrusted search path issue that lets local users escalate privileges by placing a malicious dwmapi.dll in the current working directory, demonstrated by a directory containing a .flv file. This mirrors multiple v...

CVE-2010-5244

Untrusted search path vulnerability in SiSoftware Sandra 2010 Lite 2010.7.16.52 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .sis file. NOTE: some of these details are obtained from third...

CVE-2010-5267

CVE-2010-5267 affects MunSoft Easy Office Recovery 1.1. An untrusted search path vulnerability allows local users to gain privileges via a Trojan horse dwmapi.dll loaded from the current working directory when a directory contains a .doc, .xls, or .ppt file. The root cause is a DLL search order h...

CVE-2012-4882

Multiple untrusted search path vulnerabilities in 3D XML Player 6.212.13.12076 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 JT0DevPhase.dll file in the current working directory, as demonstrated by a directory that contains a .3dx file. NOTE: the provenance of this...

CVE-2010-5227

Untrusted search path vulnerability in Opera before 10.62 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .htm, .mht, .mhtml, .xht, .xhtm, or .xhtl file. NOTE: some of these details are...

CVE-2010-5273

CVE-2010-5273 describes an untrusted search path privilege escalation in Altova DiffDog 2011 Enterprise Edition SP1. The issue arises when a malicious dwmapi.dll placed in the current working directory is loaded, demonstrated by a directory containing a .dbdif file, enabling local users to gain p...

CVE-2010-5272

Untrusted search path vulnerability in Altova DatabaseSpy 2011 Enterprise Edition SP1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .qprj file. NOTE: some of these details are obtained from...

CVE-2010-5241

CVE-2010-5241 affects Autodesk AutoCAD 2010, where local users can gain privileges via untrusted search paths involving (1) dwmapi.dll or (2) IBFS32.DLL placed in the current working directory (demonstrated with a .dwg file). The connected records consistently cite the affected product and the tw...

CVE-2010-5274

CVE-2010-5274 affects PKWARE PKZIP (versions 12.50.0013 and earlier). The flaw is an untrusted search path/DLL hijack allowing local privilege escalation via a malicious dwmapi.dll placed in the current working directory. Connected sources (Red Hat, NVD, Kaspersky) confirm local exploitation and ...

CVE-2012-4883

Multiple untrusted search path vulnerabilities in 3DVIA Composer V6R2012 HF1 Build 6.8.1.1652 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 ibfs32.dll file in the current working directory, as demonstrated by a directory that contains a .smg file. NOTE: the provenance ...

CVE-2010-5271

Untrusted search path vulnerability in Altova MapForce 2011 Enterprise Edition SP1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .mfd file. NOTE: some of these details are obtained from thi...

CVE-2010-5264

CVE-2010-5264 describes an untrusted search path vulnerability in Prof-UIS before 2.9.1, where local users can exploit a Trojan horse dwmapi.dll placed in the current working directory to gain privileges via the CExtDWM::CExtDWM method in ProfUIS290m.dll and ProfUIS290m-RDE.dll. Affected products...

CVE-2010-5240

Multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW X5 15.1.0.588 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 CrlRib.dll file in the current working directory, as demonstrated by a directory that contains a .cdr, .cpt, .cmx, or .csl file...

CVE-2010-5227

Opera before 10.62 is affected by an untrusted search path vulnerability that allows local privilege escalation via a Trojan horse dwmapi.dll placed in the attacker’s current working directory, as demonstrated by directories containing .htm, .mht, .mhtml, .xht, .xhtm, or .xhtl files. The issue ex...