CVE-2010-3153

Untrusted search path vulnerability in Adobe InDesign CS4 6.0, InDesign CS5 7.0.2 and earlier, Adobe InDesign Server CS5 7.0.2 and earlier, and Adobe InCopy CS5 7.0.2 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a...

CVE-2010-3152

CVE-2010-3152 affects Adobe Illustrator CS4/CS5 (14.0.0, 15.0.1 and earlier). It is caused by an untrusted search path allowing DLL hijacking via a Trojan horse dwmapi.dll or aires.dll located in the same folder as an .ait/.eps file, enabling arbitrary code execution. Affected versions include CS...

CVE-2010-3138

The CVE-2010-3138 issue affects Microsoft Windows XP SP3 with the Indeo Codec (iac25_32.ax) loading an insecure library (iacenc.dll) from the current working directory, enabling local privilege escalation via crafted .avi/.mka/.ra/.ram files (e.g., through players like BS.Player or Media Player C...

CVE-2010-3146: Undefined Security Weakness

Multiple untrusted search path vulnerabilities in Microsoft Groove 2007 SP2 allow local users to gain privileges via a Trojan horse 1 mso.dll or 2 GroovePerfmon.dll file in the current working directory, as demonstrated by a directory that contains a Groove vCard .vcg or Groove Tool Archive .gta...

CVE-2010-3137

Untrusted search path vulnerability in Nullsoft Winamp 5.581, and probably other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wnaspi32.dll that is located in the same folder as a .669, .aac, .aiff, .amf...

CVE-2010-3128

Untrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .tvs or .tvc file...

Design/Logic Flaw

Untrusted search path vulnerability in uTorrent 2.0.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse plugindll.dll, userenv.dll, shfolder.dll, dnsapi.dll, dwmapi.dll, iphlpapi.dll, dhcpcsvc.dll,...

CVE-2010-3131

CVE-2010-3131 is an untrusted search path vulnerability in Firefox/SeaMonkey/Thunderbird where dwmapi.dll loaded from the current working directory can be exploited if a malicious HTML/EML file is opened. The issue occurs on Windows (not Linux per the sources) when the browser loads dwmapi.dll at...

CVE-2010-3124

The CVE-2010-3124 issue affects VLC Media Player (Windows) versions 1.1.3 and earlier. The vulnerability arises from an untrusted search path where a Trojan horse wintab32.dll in the same folder as a .mp3 enables DLL hijacking and arbitrary code execution. Impact: local users, and possibly remote...

CVE-2010-3124

Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll that is located in the same folder as a .mp3 file...

CVE-2010-2929

The CVE-2010-2929 entry identifies an untrusted search path vulnerability in hsolinkcontrol (part of hsolink 1.0.118). The underlying issue is a modified PATH environment variable that is used when executing the programs route, mv, and cp, enabling local users to gain privileges through PATH mani...

WinMount 3.4.1020 Final Commandline Vulnerability

Exploit for windows platform in category local exploits ================================================= WinMount 3.4.1020 Final Commandline Vulnerability ================================================= Exploit Title : Commandline vulnerability Date : 27 Oct 2010 Author : STRELiTZIA Software :...

CVE-2009-4081

Technical details for CVE-2009-4081 are not publicly available in the provided documents; the materials reference CVE-2009-3894 but do not supply affected product/version/root cause for CVE-2009-4081. Monitor for updates.

Wind news site content management system explosive path vulnerability-vulnerability warning-the black bar safety net

Wind news site content management system the latest burst path vulnerability in! Directly burst the absolute path Methods: Directly in the URL added on the Admin/User/getGroupDebate. asp to it!!!! Microsoft VBScript runtime error-Error '800a01f4' Variable is undefined: 'Conn'...

CVE-2009-2761

CVE-2009-2761: Unquoted Windows search path vulnerability in Avira AntiVir family (AntiVir, Premium, Premium Security Suite, Professional) allows local privilege escalation via a malicious antivir.exe in C:\Program Files\avira, caused by an unquoted path in the scheduler (sched.exe). Affected ver...

CVE-2009-0667

Untrusted search path vulnerability in Agent/Backend.pm in Ocsinventory-Agent before 0.0.9.3, and 1.x before 1.0.1, in OCS Inventory allows local users to gain privileges via a Trojan horse Perl module in an arbitrary directory...

CVE-2008-6558

Untrusted search path vulnerability in ReliantHA 1.1.4 (SCO UnixWare 7.1.4) affects hvdisp and rcvm. Local users can gain root privileges by setting RELIANT_PATH to a malicious bin/hvenv, exploiting an untrusted PATH search. Affected components: RELIANT_PATH environment variable usage in hvdisp/r...

GLSA-200903-05 : PDFjam: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200903-05 PDFjam: Multiple vulnerabilities Martin Vaeth reported multiple untrusted search path vulnerabilities CVE-2008-5843. Marcus Meissner of the SUSE Security Team reported that temporary files are created with a predictable...

Fedora Core 9 FEDORA-2009-1189 (gedit)

The remote host is missing an update to gedit announced via advisory FEDORA-2009-1189. OpenVAS Vulnerability Test $Id: fcore20091189.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1189 gedit Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Design/Logic Flaw

Untrusted search path vulnerability in src/ifpython.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySysSetArgv function CVE-2008-5983, as demonstrated ...