CVE-2012-4866

Untrusted search path vulnerability in Xtreme RAT 3.5 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as the current working directory. NOTE: some of these details are obtained from third party...

CVE-2012-4866

CVE-2012-4866 describes an untrusted search path vulnerability in Xtreme RAT 3.5 that enables local users to execute arbitrary code via a Trojan horse dwmapi.dll located in the current working directory, i.e., a DLL hijacking scenario. The connected documents corroborate this, listing the same de...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in MindManager 2012 10.0.493 allow local users to gain privileges via a Trojan horse 1 ssgp.dll or 2 dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .mmap file. NOTE: some of these details are obtained...

Design/Logic Flaw

Untrusted search path vulnerability in PhotoImpact X3 13.00.0000.0 allows local users to gain privileges via a Trojan horse bwsconst.dll file in the current working directory, as demonstrated by a directory that contains a .ufp or .ufo file. NOTE: the provenance of this information is unknown; th...

Design/Logic Flaw

Untrusted search path vulnerability in KeePass Password Safe before 1.18 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .kdb file. NOTE: some of these details are obtained from third party information...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in SWiSH Max3 3.0 2009.11.30 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 SWiSHmax3res.dll file in the current working directory, as demonstrated by a directory that contains a .swi file. NOTE: some of these details are...

Design/Logic Flaw

Untrusted search path vulnerability in facebookplugin.fpi in the Facebook plug-in in Foxit Reader 5.3.1.0606 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .pdf file. NOTE: some of these...

CVE-2010-5199

The CVE-2010-5199 entry describes an untrusted search path vulnerability in PhotoImpact X3 13.00.0000.0 that lets local users gain privileges by placing a malicious bwsconst.dll in the current working directory, triggered by a directory containing a .ufp or .ufo file. The root cause is an untrust...

CVE-2010-5201

CVE-2010-5201 describes an untrusted search path vulnerability in MAGIX Samplitude Producer 11, allowing local privilege escalation when a malicious PlayRIplA6.dll in the current working directory is loaded, demonstrated with a directory that contains a .vip file. The root cause is the use of an ...

CVE-2010-5211

CVE-2010-5211 affects ALSee 6.20.0.1. The issue is an untrusted search path that lets local users gain privileges via a Trojan horse patchani.dll placed in the current working directory, demonstrated by a directory containing various image file types. The impact is local privilege escalation; exp...

CVE-2010-5220

CVE-2010-5220 affects MEO Encryption Software 2.02. It is an untrusted search path privilege-escalation vulnerability where a trojan dwmapi.dll in the current working directory can be loaded to gain local privileges (via a directory containing a .meo or .cry file). The provided sources describe t...

CVE-2010-5202

CVE-2010-5202 affects JetAudio 8.0.7.1000 Basic. It is described as an untrusted search path vulnerability that allows local users to gain privileges via a Trojan horse WNASPI32.DLL file placed in the current working directory, demonstrated with a directory containing a .mp3 file. The vulnerabili...

CVE-2010-5216

The CVE-2010-5216 issue affects LINGO 11.0.1.6 and 12.0.2.20, with an untrusted search path vulnerability that lets local users gain privileges via a Trojan horse myuser.dll in the current working directory, demonstrated by a directory containing a .ltf file. Root cause is untrusted search path h...

CVE-2011-5157

CVE-2011-5157: A local untrusted search path vulnerability in Attachmate Reflection before 14.1 SP1 allows local users to gain privileges by placing a Trojan horse DLL in the current working directory. This is the same family as CVE-2011-0107 and is tied to Attachmate Reflection’s Windows client....

CVE-2010-5196

CVE-2010-5196 concerns KeePass Password Safe prior to 2.13, where an untrusted search path allows local privilege escalation via a Trojan horse DwmApi.dll in the current working directory when a .kdbx file is present. The issue is caused by loading a malicious DLL from the CWD, enabling a local u...

Discuz X2. 5 the latest version of the proof of the path-vulnerability warning-the black bar safety net

! Vulnerability to prove: http://www.erdare.com/source/plugin/myrepeats/table/tablemyrepeats.php Solution: add! defined'INUC' && exit'Access Denied';...

CVE-2012-2764

Untrusted search path vulnerability in Google Chrome before 20.0.1132.43 on Windows might allow local users to gain privileges via a Trojan horse Metro DLL in the current working directory...

CVE-2012-2753

Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect aka EPC GUI in Check Point Endpoint Security R73.x and E80.x on the VPN blade platform, Endpoint Security VPN R75, Endpoint Connect R73.x, and Remote Access Clients E75.x allows local users to gain privileges via a Trojan...

CVE-2012-2753

Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect aka EPC GUI in Check Point Endpoint Security R73.x and E80.x on the VPN blade platform, Endpoint Security VPN R75, Endpoint Connect R73.x, and Remote Access Clients E75.x allows local users to gain privileges via a Trojan...

CVE-2012-1849

Untrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .ocsmeet file, aka "Lync Insecure Library Loading...