CVE-2010-4159

CVE-2010-4159 describes an untrusted search path vulnerability in the Mono runtime up to version 2.8, where metadata/loader.c could load a Trojan horse native library from the current working directory, allowing local privilege escalation. The root cause is insecure loading of libraries from the ...