CVE-2010-5267

Untrusted search path vulnerability in MunSoft Easy Office Recovery 1.1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .doc, .xls, or .ppt file. NOTE: some of these details are obtained from...

CVE-2010-5247

CVE-2010-5247 involves QtWeb Browser 3.3 build 043 and an untrusted search path vulnerability. Local users can gain privileges by placing a Trojan horse wintab32.dll in the current working directory, demonstrated via a directory containing .html/.htm/.mhtml files. Affected component is the browse...

CVE-2010-5257

Multiple untrusted search path vulnerabilities in ArchiCAD 13 and 14 allow local users to gain privileges via a Trojan horse 1 srcsrv.dll or 2 GSAutoTester.DLL file in the current working directory, as demonstrated by a directory that contains a .2df file. NOTE: some of these details are obtained...

CVE-2010-5263

Untrusted search path vulnerability in Sothink SWF Decompiler 6.0 Build 610 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .flv file. NOTE: some of these details are obtained from third part...

CVE-2010-5242

Untrusted search path vulnerability in Sound Forge Pro 10.0b Build 474 allows local users to gain privileges via a Trojan horse MtxParhVegasPreview.dll file in the current working directory, as demonstrated by a directory that contains a .sfw file. NOTE: some of these details are obtained from...

CVE-2010-5259

CVE-2010-5259 affects IsoBuster 2.8. The vulnerability arises from untrusted search path handling where local users can privilege escalate by placing a Trojan horse wnaspi32.dll or ntaspi32.dll in the current working directory (demonstrated with a directory containing a .img file). This entry doc...

CVE-2010-5251

Multiple untrusted search path vulnerabilities in IBM Lotus Notes 8.5 allow local users to gain privileges via a Trojan horse 1 nnoteswc.dll or 2 nlsxbe.dll file in the current working directory, as demonstrated by a directory that contains a .vcf, .vcs, or .ics file. NOTE: the provenance of this...

CVE-2012-4880

CVE-2012-4880 affects DVD Architect Pro 5.2 Build 133 and DVD Architect Studio 5.0 Build 156, due to multiple untrusted search path vulnerabilities. An attacker-local privilege escalation is possible when a malicious enc_mp2v.200 or CFHDDecoder.dll is placed in the current working directory, as d...

CVE-2010-5273

Untrusted search path vulnerability in Altova DiffDog 2011 Enterprise Edition SP1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .dbdif file. NOTE: some of these details are obtained from...

CVE-2010-5247

Untrusted search path vulnerability in QtWeb Browser 3.3 build 043 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .html, .htm, or .mhtml file. NOTE: some of these details are obtained from...

CVE-2010-5271

CVE-2010-5271 affects Altova MapForce 2011 Enterprise Edition SP1. The vulnerability is an untrusted search path/DLL hijacking issue where a malicious dwmapi.dll in the current working directory can be loaded, enabling local privilege escalation for users running the software. Root cause: loading...

CVE-2010-5266

Vulnerability CVE-2010-5266 affects VideoCharge Studio 2.9.0.632 via an untrusted search path that allows local users to gain privileges using a malicious dwmapi.dll placed in the current working directory (demonstrated with a .vsc file). The Red Hat and NVD entries corroborate the same Issue; no...

CVE-2010-5248

Untrusted search path vulnerability in UltraVNC 1.0.8.2 allows local users to gain privileges via a Trojan horse vnclang.dll file in the current working directory, as demonstrated by a directory that contains a .vnc file. NOTE: some of these details are obtained from third party information...

CVE-2010-5266

Untrusted search path vulnerability in VideoCharge Studio 2.9.0.632 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .vsc file. NOTE: some of these details are obtained from third party...

CVE-2012-4881

CVE-2012-4881 affects moviEZ HD 1.0 Build 2554-29894-A. It is an untrusted search path vulnerability where local users can gain privileges by placing a Trojan horse avrt.dll in the current working directory, demonstrated by a directory containing a .mvz file. Provenance is unknown; information co...

CVE-2010-5260

CVE-2010-5260 describes an untrusted search path (DLL hijacking) vulnerability in Agrin All DVD Ripper 4.0. A local attacker can gain privileges by placing a malicious wnaspi32.dll in the current working directory, demonstrated using a directory containing an .ifo file. Affected component/file: w...

CVE-2010-5256

CVE-2010-5256 affects CDisplay 1.8.1 and is described as an untrusted search path vulnerability that allows local privilege escalation via a Trojan horse TRACE32.DLL located in the current working directory, illustrated by a directory containing a .cba file. The available connected documents corr...

CVE-2010-5234

CVE-2010-5234 affects Camtasia Studio 7.0.1 build 57. The issue is an untrusted search path/ DLL hijacking vulnerability: local users can gain privileges by placing (1) MFC90ENU.DLL or (2) MFC90LOC.DLL in the current working directory, demonstrated via a directory containing a .cmmp or .camrec fi...

CVE-2012-4882

The CVE-2012-4882 entry affects 3D XML Player 6.212.13.12076. The root cause is untrusted search path vulnerabilities where local users can gain privileges by placing a Trojan-horse DLL in the current working directory (dwmapi.dll or JT0DevPhase.dll) and a .3dx file present in that directory. The...

CVE-2010-5229

010 Editor is affected (versions 3.1.2 and earlier). It suffers an untrusted search path/LPE flaw: a malicious wintab32.dll in the current working directory can be loaded, enabling local privilege escalation via a DLL hijack. Root cause identified as DLL search order exploitation. Remediation per...