CVE-2010-5198

Multiple untrusted search path vulnerabilities in Intuit QuickBooks 2010 allow local users to gain privileges via a Trojan horse 1 dbicudtx11.dll, 2 mfc90enu.dll, or 3 mfc90loc.dll file in the current working directory, as demonstrated by a directory that contains a .des, .qbo, or .qpg file. NOTE...

CVE-2010-5215

The CVE-2010-5215 entry concerns SWiSH Max3 3.0 (2009.11.30) with local privilege escalation via untrusted search paths. A Trojan horse can be introduced by placing (1) dwmapi.dll or (2) SWiSHmax3res.dll in the current working directory, demonstrated by a directory containing a .swi file. This cr...

CVE-2012-4756

Multiple untrusted search path vulnerabilities in CyberLink LabelPrint 2.5.3602 allow local users to gain privileges via a Trojan horse 1 mfc71loc.dll or 2 mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .lpp file. NOTE: the provenance of this...

CVE-2011-5156

CVE-2011-5156 describes an Untrusted search path vulnerability in Effective File Search 6.7, where local users can gain privileges by placing a Trojan horse ztvunrar36.dll in the current working directory, demonstrated via a directory containing an .efs file. Affected product is Effective File Se...

CVE-2010-5219

The CVE-2010-5219 issue affects SmartFTP 4.0.1140.0 and is caused by an untrusted search path where a Trojan horse dwmapi.dll in the current working directory can be loaded, enabling local privilege escalation. Documents consistently describe this as a local privilege vulnerability stemming from ...

CVE-2010-5208

CVE-2010-5208 affects Kingsoft Office 2010 (build 6.6.0.2477) components Presentation, Writer, and Spreadsheets. The root cause is untrusted search path/DLL hijacking via a Trojan horse plgpf.dll located in the current working directory, allowing local privilege escalation. Affected product detai...

CVE-2010-5206

CVE-2010-5206 concerns multiple untrusted search path vulnerabilities in the product family named e-press ONE Office E-NoteTaker and E-Zip. The issue allows local users to gain privileges by placing Trojan horse DLLs (1) mfc71enu.dll or (2) mfc71loc.dll) in the current working directory, demonstr...

CVE-2010-5220

Untrusted search path vulnerability in MEO Encryption Software 2.02 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .meo or .cry file. NOTE: some of these details are obtained from third part...

CVE-2010-5208

Multiple untrusted search path vulnerabilities in the 1 Presentation, 2 Writer, and 3 Spreadsheets components in Kingsoft Office 2010 6.6.0.2477 allow local users to gain privileges via a Trojan horse plgpf.dll file in the current working directory, as demonstrated by a directory that contains a...

CVE-2010-5215

Multiple untrusted search path vulnerabilities in SWiSH Max3 3.0 2009.11.30 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 SWiSHmax3res.dll file in the current working directory, as demonstrated by a directory that contains a .swi file. NOTE: some of these details are...

CVE-2012-4754

CVE-2012-4754 affects MindManager 2012 (version 10.0.493). The issue is an untrusted search path vulnerability where local users can gain privileges via a Trojan horse placed in the current working directory (notably using either ssgp.dll or dwmapi.dll), demonstrated by a directory containing a ....

CVE-2012-4759

CVE-2012-4759 describes an untrusted search path vulnerability in Foxit Reader’s Facebook plug-in (facebook_plugin.fpi). A local attacker could gain privileges by placing a Trojan horse dwmapi.dll in the current working directory while Foxit Reader 5.3.1.0606 is running, as demonstrated by a dire...

CVE-2010-5221

CVE-2010-5221 describes an untrusted search path vulnerability in STDU Explorer 1.0.201 where a local attacker can gain privileges by placing a malicious dwmapi.dll in the current working directory. The root cause is loading a Trojan horse DLL from the process working directory, enabling local pr...

CVE-2010-5196

Untrusted search path vulnerability in KeePass Password Safe before 2.13 allows local users to gain privileges via a Trojan horse DwmApi.dll file in the current working directory, as demonstrated by a directory that contains a .kdbx file. NOTE: some of these details are obtained from third party...

CVE-2010-5217

Multiple untrusted search path vulnerabilities in TuneUp Utilities 2009 8.0.3310 and 2010 9.0.4600 allow local users to gain privileges via a Trojan horse 1 wscapi.dll or 2 vclib32.dll file in the current working directory, as demonstrated by a directory that contains a .tvs file. NOTE: the...

CVE-2010-5220

CVE-2010-5220 affects MEO Encryption Software 2.02. It is an untrusted search path privilege-escalation vulnerability where a trojan dwmapi.dll in the current working directory can be loaded to gain local privileges (via a directory containing a .meo or .cry file). The provided sources describe t...

CVE-2011-5155

Untrusted search path vulnerability in Help & Manual 5.5.1 Build 1296 allows local users to gain privileges via a Trojan horse ijl15.dll file in the current working directory, as demonstrated by a directory that contains a .hmxz, .hmxp, .hmskin, .hmx, .hm3, .hpj, .hlp, or .chm file. NOTE: some of...

CVE-2010-5212

CVE-2010-5212 describes an untrusted search path vulnerability in Adobe LiveCycle Designer ES2 9.0.0.20091029.1.612548 . An object named assisten_US.dll in the current working directory can be loaded, allowing local users to gain privileges through a Trojan horse file, as demonstrated by a direct...

CVE-2010-5218

CVE-2010-5218 affects Dupehunter 9.0.0.3911 and is described as an untrusted search path vulnerability that allows local privilege escalation via a Trojan horse Fwpuclnt.dll in the current working directory, demonstrated by a directory with a .dhjb file. Root cause: DLL search order trust issue. ...

CVE-2010-5199

Untrusted search path vulnerability in PhotoImpact X3 13.00.0000.0 allows local users to gain privileges via a Trojan horse bwsconst.dll file in the current working directory, as demonstrated by a directory that contains a .ufp or .ufo file. NOTE: the provenance of this information is unknown; th...