CVE-2010-5268

Untrusted search path vulnerability in Amazon Kindle for PC 1.3.0 30884 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .azw file. NOTE: some of these details are obtained from third party...

CVE-2012-4883

Multiple untrusted search path vulnerabilities in 3DVIA Composer V6R2012 HF1 Build 6.8.1.1652 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 ibfs32.dll file in the current working directory, as demonstrated by a directory that contains a .smg file. NOTE: the provenance ...

CVE-2010-5249

Untrusted search path vulnerability in Sophos Free Encryption 2.40.1.1 and Sophos SafeGuard PrivateCrypto 2.40.1.2 allows local users to gain privileges via a Trojan horse pcrypt0406.dll file in the current working directory, as demonstrated by a directory that contains a .uti file. NOTE: the...

CVE-2010-5261

Untrusted search path vulnerability in SnowFox Total Video Converter 2.5.1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .avi file. NOTE: some of these details are obtained from third party...

CVE-2010-5264

CVE-2010-5264 describes an untrusted search path vulnerability in Prof-UIS before 2.9.1, where local users can exploit a Trojan horse dwmapi.dll placed in the current working directory to gain privileges via the CExtDWM::CExtDWM method in ProfUIS290m.dll and ProfUIS290m-RDE.dll. Affected products...

CVE-2010-5257

CVE-2010-5257 describes local privilege escalation in ArchiCAD 13 and 14 due to untrusted search path vulnerabilities. An attacker can place a Trojan horse DLL (srcsrv.dll or GSAutoTester.DLL) in the current working directory, with a .2df file present, to trick the application into loading the at...

CVE-2010-5249

The CVE-2010-5249 entry concerns an untrusted search path vulnerability in Sophos Free Encryption 2.40.1.1 and Sophos SafeGuard PrivateCrypto 2.40.1.2. The flaw lets local users gain privileges by placing a malicious pcrypt0406.dll in the current working directory, demonstrated via a directory co...

CVE-2010-5236

Untrusted search path vulnerability in Roxio Easy Media Creator Home 9.0.136 allows local users to gain privileges via a Trojan horse homeutils9.dll file in the current working directory, as demonstrated by a directory that contains a .roxio, .c2d, or .gi file. NOTE: some of these details are...

CVE-2010-5273

CVE-2010-5273 describes an untrusted search path privilege escalation in Altova DiffDog 2011 Enterprise Edition SP1. The issue arises when a malicious dwmapi.dll placed in the current working directory is loaded, demonstrated by a directory containing a .dbdif file, enabling local users to gain p...

CVE-2010-5260

Untrusted search path vulnerability in Agrin All DVD Ripper 4.0 allows local users to gain privileges via a Trojan horse wnaspi32.dll file in the current working directory, as demonstrated by a directory that contains a .ifo file. NOTE: some of these details are obtained from third party...

CVE-2010-5237

CVE-2010-5237 affects CyberLink PowerDirector 7. The vulnerability is an untrusted search path that allows local privilege elevation via a Trojan horse mfc71loc.dll placed in the current working directory. Exploitation is demonstrated by a directory containing a media project/file with extensions...

CVE-2010-5232

DivX Plus Player 8.1.0 is affected by an untrusted search path vulnerability that allows local users to gain privileges via a Trojan horse ssleay32.dll in a directory. Root cause: loading of an attacker-controlled DLL due to search path precedence. Impact: local privilege escalation. Exploit deta...

CVE-2010-5272

Untrusted search path vulnerability in Altova DatabaseSpy 2011 Enterprise Edition SP1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .qprj file. NOTE: some of these details are obtained from...

CVE-2010-5267

CVE-2010-5267 affects MunSoft Easy Office Recovery 1.1. An untrusted search path vulnerability allows local users to gain privileges via a Trojan horse dwmapi.dll loaded from the current working directory when a directory contains a .doc, .xls, or .ppt file. The root cause is a DLL search order h...

CVE-2010-5252

Untrusted search path vulnerability in HTTrack 3.43-9 allows local users to gain privileges via a Trojan horse httrack-plugin.dll file in the current working directory, as demonstrated by a directory that contains a .whtt file. NOTE: some of these details are obtained from third party information...

CVE-2010-5254

Untrusted search path vulnerability in GFI Backup 3.1 Build 20100730 2009 Home Edition allows local users to gain privileges via a Trojan horse ArmAccess.dll file in the current working directory, as demonstrated by a directory that contains a .gbc or .gbt file. NOTE: some of these details are...

CVE-2010-5240

Multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW X5 15.1.0.588 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 CrlRib.dll file in the current working directory, as demonstrated by a directory that contains a .cdr, .cpt, .cmx, or .csl file...

CVE-2010-5240

Corel PHOTO‑PAINT and CorelDRAW X5 (version 15.1.0.588) are affected by multiple untrusted search path vulnerabilities that allow local users to gain privileges when a Trojan horse in the current working directory precedes legitimate DLLs. The root cause is untrusted search paths involving dwmapi...

CVE-2010-5248

CVE-2010-5248 affects UltraVNC 1.0.8.2 and possibly earlier versions, where an untrusted search path allows local users to gain privileges via a Trojan horse vnclang.dll placed in the current working directory, demonstrated by a directory containing a .vnc file. The vulnerability is a local privi...

CVE-2010-5227

Opera before 10.62 is affected by an untrusted search path vulnerability that allows local privilege escalation via a Trojan horse dwmapi.dll placed in the attacker’s current working directory, as demonstrated by directories containing .htm, .mht, .mhtml, .xht, .xhtm, or .xhtl files. The issue ex...