CVE-2015-0974

CVE-2015-0974 affects ZTE Datacard MF19 0V1.0.0B04 (mobiconnect). Root cause: untrusted search path allows a local attacker to cause privilege escalation by referencing a malicious DLL (mms_dll_r.dll or mediaplayerdll.dll) in the 'Ucell Internet' directory, yielding complete control. Public explo...