Design/Logic Flaw

Untrusted search path vulnerability in Fenrir Sleipnir before 2.9.5 and Grani before 4.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

CVE-2010-3160

Archive Decoder ≤1.23 is affected by an untrusted search path vulnerability that allows local users to gain privileges by placing a Trojan horse executable in the current working directory. The issue arises from insecure loading of executables during file extraction. Affected product is Archive D...

CVE-2010-3163

CVE-2010-3163 affects Fenrir Sleipnir <= 2.9.4 and Grani

CVE-2010-3161

CVE-2010-3161 affects TeraPad (pre-1.00), where unsafe DLL loading due to the DLL search path can be exploited by placing a Trojan DLL in the current working directory. This untrusted search path vulnerability may allow local attackers to execute arbitrary code with the application’s privileges. ...

CVE-2010-3164

CVE-2010-3164 affects Fenrir Sleipnir (2.9.4 and earlier) and Grani (4.3 and earlier). The vulnerability is an untrusted search path that may allow a local attacker to gain privileges by placing a Trojan horse executable in the current working directory, enabling arbitrary code execution with the...

CVE-2010-4039

Google Chrome before 7.0.517.41 on Linux does not properly set the PATH environment variable, which has unspecified impact and attack vectors...

CVE-2010-4039

Removed by vendor...

CVE-2010-3158

CVE-2010-3158 affects Lhaplus prior to 1.58 and is an untrusted search path vulnerability that allows local privilege escalation via a Trojan horse executable in the current working directory. Affected component/file: Lhaplus (untrusted search path handling). Impact described in sources: attacker...

CVE-2010-2368

Summary: Lhaplus is vulnerable to a local untrusted search path issue in DLL loading. Root cause: insecure DLL search path allows a Trojan horse DLL in the current working directory to be loaded. Impact: local privilege escalation. Affected versions: Lhaplus before 1.58 (e.g., 1.57 and earlier). ...

Design/Logic Flaw

Untrusted search path vulnerability in IDM Computer Solutions UltraEdit 16.20.0.1009, 16.10.0.1036, and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same...

QuickTime < 7.6.8 Multiple Vulnerabilities (Windows)

Binary data 801185.prm...

QuickTime < 7.6.8 Multiple Vulnerabilities (Windows) (deprecated)

Binary data 5665.prm...

CVE-2010-2600

CVE-2010-2600 affects BlackBerry Desktop Software. The vulnerability is an untrusted search path/DLL loading issue: a Trojan DLL located in the same folder as a processed file can lead to arbitrary code execution via DLL hijacking. Reported affected versions include BlackBerry Desktop Software up...

CVE-2010-2953

Technical details about CVE-2010-2953 (affected products, root cause, and fixes) are not publicly provided in the supplied documents; monitor for updates from vendors and security advisories.

Luftguitar CMS - Upload Arbitrary File

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-13-luftguitar-cms-vulnerability-upload-arbitrary-file/ ''' Abysssec Inc Public Advisory Title : Luftguitar CMS Vulnerability: Upload arbitrary...

CVE-2010-1805

The CVE-2010-1805 issue affects Apple Safari on Windows (Safari 4.x before 4.1.2 and 5.x before 5.0.2). The root cause is an untrusted search path: Safari launches Windows Explorer (explorer.exe) when showing the location of a downloaded file, using a search path that can include a directory cont...

CVE-2010-3144

Untrusted search path vulnerability in the Internet Connection Signup Wizard in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse smmscrpt.dll file in the current working directory, as demonstrated by a directory that contains an ISP or...

Design/Logic Flaw

Untrusted search path vulnerability in Adobe On Location CS4 Build 315 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ibfs32.dll that is located in the same folder as an OLPROJ file...

CVE-2010-3147

CVE-2010-3147 describes an untrusted search path vulnerability in Windows Address Book (wab.exe) where a Trojan horse wab32res.dll loaded from the current working directory can execute code. Affected: WAB/Windows Contacts components on Windows XP SP2/XP SP3, Server 2003 SP2, Vista SP1/SP2, Server...

CVE-2010-3149

Untrusted search path vulnerability in Adobe Device Central CS5 3.0.0376, 3.0.1.0 3027, and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse qtcf.dll that is located in the same folder as an...