Design/Logic Flaw

Untrusted search path vulnerability in Qualcomm eXtensible Diagnostic Monitor QXDM 03.09.19 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse mfc71enu.dll that is located in the same folder as a .isf file...

Design/Logic Flaw

Untrusted search path vulnerability in IDM Computer Solutions UltraEdit 16.20.0.1009, 16.10.0.1036, and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same...

CVE-2010-3403

The CVE-2010-3403 entry concerns Qualcomm eXtensible Diagnostic Monitor (QXDM) 03.09.19. The vulnerability is an untrusted search path that enables DLL hijacking via a Trojan horse mfc71enu.dll located in the same folder as an .isf file, allowing local users and possibly remote attackers to execu...

CVE-2010-3402

CVE-2010-3402 affects IDM Computer Solutions UltraEdit (notably v16.20.0.1009 and v16.10.0.1036). The vulnerability stems from an untrusted search path that enables DLL hijacking via a Trojan horse dwmapi.dll placed in the same folder as a bin, cpp, css, c, dat, hpp, html, h, ini, java, log, mak,...

CVE-2010-3402

Untrusted search path vulnerability in IDM Computer Solutions UltraEdit 16.20.0.1009, 16.10.0.1036, and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same...

CVE-2010-3403

Untrusted search path vulnerability in Qualcomm eXtensible Diagnostic Monitor QXDM 03.09.19 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse mfc71enu.dll that is located in the same folder as a .isf file...

Design/Logic Flaw

Untrusted search path vulnerability in PGP Desktop 9.9.0 Build 397, 9.10.x, 10.0.0 Build 2732, and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse tsp.dll or tvttsp.dll that is located in the...

CVE-2010-3397

CVE-2010-3397 affects Symantec PGP Desktop (versions including 9.9.0 build 397, 9.10.x, 10.0.0 build 2732 and likely others). Root cause is an untrusted search path vulnerability allowing DLL hijacking via tsp.dll or tvttsp.dll located in the same folder as credential/key files (.p12, .pem, .pgp,...

CVE-2010-2600

CVE-2010-2600 affects BlackBerry Desktop Software. The vulnerability is an untrusted search path/DLL loading issue: a Trojan DLL located in the same folder as a processed file can lead to arbitrary code execution via DLL hijacking. Reported affected versions include BlackBerry Desktop Software up...

Apple Safari Multiple Vulnerabilities - Sep10

The host is installed with Apple Safari web browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplesafarimultvulnsep10.nasl 5263 2017-02-10 13:45:51Z teissa $ Apple Safari Multiple Vulnerabilities - Sep10 Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...

CVE-2010-2953

Technical details about CVE-2010-2953 (affected products, root cause, and fixes) are not publicly provided in the supplied documents; monitor for updates from vendors and security advisories.

CVE-2010-2953

Untrusted search path vulnerability in a certain Debian GNU/Linux patch for the couchdb script in CouchDB 0.8.0 allows local users to gain privileges via a crafted shared library in the current working directory...

[SECURITY] [DSA 2107-1] New couchdb package fixes arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - ------------------------------------------------------------------------ Debian Security Advisory DSA-2107-1 [email protected] http://www.debian.org/security/ Sebastien Delafond Sep 9, 2010 http://www.debian.org/security/faq - -...

Debian DSA-2107-1 : couchdb - untrusted search path

Dan Rosenberg discovered that in couchdb, a distributed, fault-tolerant and schema-free document-oriented database, an insecure library search path is used. A local attacker could execute arbitrary code by first dumping a maliciously crafted shared library in some directory, and then having an...

CVE-2010-3199

Untrusted search path vulnerability in TortoiseSVN 1.6.10, Build 19898 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Tortois...

Design/Logic Flaw

Untrusted search path vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 on Windows allows local users to gain privileges via a Trojan horse explorer.exe aka Windows Explorer program in a directory containing a file that had been downloaded by Safari...

CVE-2010-1805

Untrusted search path vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 on Windows allows local users to gain privileges via a Trojan horse explorer.exe aka Windows Explorer program in a directory containing a file that had been downloaded by Safari...

CVE-2010-3199

CVE-2010-3199 describes an untrusted search path vulnerability in TortoiseSVN 1.6.10, Build 19898 and earlier . The issue allows local users, and possibly remote attackers, to execute arbitrary code and perform DLL hijacking via a Trojan horse dwmapi.dll located in the same folder as a file proce...

CVE-2010-1805

The CVE-2010-1805 issue affects Apple Safari on Windows (Safari 4.x before 4.1.2 and 5.x before 5.0.2). The root cause is an untrusted search path: Safari launches Windows Explorer (explorer.exe) when showing the location of a downloaded file, using a search path that can include a directory cont...

CVE-2010-1805

Untrusted search path vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 on Windows allows local users to gain privileges via a Trojan horse explorer.exe aka Windows Explorer program in a directory containing a file that had been downloaded by Safari...