CVE-2010-5264

CVE-2010-5264 describes an untrusted search path vulnerability in Prof-UIS before 2.9.1, where local users can exploit a Trojan horse dwmapi.dll placed in the current working directory to gain privileges via the CExtDWM::CExtDWM method in ProfUIS290m.dll and ProfUIS290m-RDE.dll. Affected products...