CVE-2010-5264

CVE-2010-5264 describes an untrusted search path vulnerability in Prof-UIS before 2.9.1, where local users can exploit a Trojan horse dwmapi.dll placed in the current working directory to gain privileges via the CExtDWM::CExtDWM method in ProfUIS290m.dll and ProfUIS290m-RDE.dll. Affected products...

KLA10299 LPE vulnerability in Prof-UIS

An untrusted path vulnerability was found in Prof-UIS. By exploiting this vulnerability malicious users can gain priveleges. This vulnerability can be exploited locally via a DLL hijack. Original advisories Changelog Related products Prof-UIS CVE list CVE-2010-5264 high Solution Update to latest...