CVE-2010-5210

CVE-2010-5210 affects Sorax Reader 2.0.3129.70. The root cause is an untrusted search path vulnerability that allows local users to gain privileges via a Trojan horse dwmapi.dll file placed in the current working directory, as demonstrated by a directory containing a .pdf file. The description in...

CVE-2012-4758

Multiple untrusted search path vulnerabilities in CyberLink PowerProducer 5.5.3.2325 allow local users to gain privileges via a Trojan horse 1 mfc71loc.dll or 2 mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .ppp or .rdf file. NOTE: the provenan...

CVE-2011-5155

CVE-2011-5155 involves an untrusted search path vulnerability in Help & Manual 5.5.1 Build 1296. Local users can gain privileges by placing a Trojan horse ijl15.dll in the current working directory, with exploitation demonstrated via directories containing extensions such as .hmxz, .hmxp, .hmskin...

CVE-2010-5204

CVE-2010-5204 affects IBM Lotus Symphony 1.3.0 (20090908.0900). The issue is multiple untrusted search path vulnerabilities that enable local privilege escalation via Trojan horse DLLs eclipse_1114.dll or emser645mi.dll placed in the current working directory, demonstrated with directories contai...

CVE-2010-5225

CVE-2010-5225 concerns an untrusted search path vulnerability in Babylon 8.1.0 r16. A Trojan BESExtension.dll placed in the current working directory can be used by a local attacker to gain privileges, demonstrated by a directory containing a .bgl file. The issue hinges on DLL search order and th...

CVE-2010-5224

CVE-2010-5224 is an untrusted search path vulnerability in Cool iPhone Ringtone Maker 2.2.3. Local users can gain privileges via a hijacked dwmapi.dll placed in the current working directory, demonstrated by a directory containing a .mp3 file. The available sources consistently describe the issue...

CVE-2010-5201

CVE-2010-5201 describes an untrusted search path vulnerability in MAGIX Samplitude Producer 11, allowing local privilege escalation when a malicious PlayRIplA6.dll in the current working directory is loaded, demonstrated with a directory that contains a .vip file. The root cause is the use of an ...

CVE-2012-4757

CVE-2012-4757 describes multiple untrusted search path vulnerabilities in CyberLink StreamAuthor 4.0 build 3308 that allow local users to gain privileges by placing (1) mfc71loc.dll or (2) mfc71enu.dll in the current working directory, demonstrated via a directory containing a .sta or .stp file. ...

CVE-2011-5152

CVE-2011-5152 involves multiple untrusted search path vulnerabilities in ACDSee Photo Editor 2008 5.x build 291 , enabling local users to gain privileges via a Trojan horse placed in the current working directory (specifically the files Wintab32.dll or CV11-DialogEditor.dll ) as shown by a direct...

CVE-2010-5213

Untrusted search path vulnerability in Adobe LiveCycle Designer 8.2.1.3144.1.471865 allows local users to gain privileges via a Trojan horse .dll file in the current working directory, as demonstrated by a directory that contains a .tds file. NOTE: some of these details are obtained from third...

CVE-2010-5205

Multiple untrusted search path vulnerabilities in e-press ONE Office Author allow local users to gain privileges via a Trojan horse 1 javamsci.dll or 2 mscijava.dll file in the current working directory, as demonstrated by a directory that contains a .psw file. NOTE: some of these details are...

CVE-2010-5223

Multiple untrusted search path vulnerabilities in Phoenix Project Manager 2.1.0.8 allow local users to gain privileges via a Trojan horse 1 wbtrv32.dll or 2 w3btrv7.dll file in the current working directory, as demonstrated by a directory that contains a .ppx file. NOTE: some of these details are...

CVE-2010-5201

Untrusted search path vulnerability in MAGIX Samplitude Producer 11 allows local users to gain privileges via a Trojan horse PlayRIplA6.dll file in the current working directory, as demonstrated by a directory that contains a .vip file. NOTE: some of these details are obtained from third party...

CVE-2010-5221

Untrusted search path vulnerability in STDU Explorer 1.0.201 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory. NOTE: some of these details are obtained from third party information...

CVE-2010-5205

CVE-2010-5205 concerns untrusted search path vulnerabilities in e-press ONE Office Author, enabling local privilege escalation via Trojan horse DLLs (java_msci.dll or msci_java.dll) placed in the current working directory, demonstrated with a directory containing a .psw file. Connected records co...

CVE-2010-5199

The CVE-2010-5199 entry describes an untrusted search path vulnerability in PhotoImpact X3 13.00.0000.0 that lets local users gain privileges by placing a malicious bwsconst.dll in the current working directory, triggered by a directory containing a .ufp or .ufo file. The root cause is an untrust...

CVE-2010-5203

CVE-2010-5203 affects NCP Secure Enterprise Client before 9.21 Build 68, Secure Entry Client before 9.23 Build 18, and Secure Client – Juniper Edition before 9.23 Build 18. The issue is an untrusted search path privilege escalation where local users can gain privileges via Trojan horse files in t...

CVE-2010-5211

CVE-2010-5211 affects ALSee 6.20.0.1. The issue is an untrusted search path that lets local users gain privileges via a Trojan horse patchani.dll placed in the current working directory, demonstrated by a directory containing various image file types. The impact is local privilege escalation; exp...

CVE-2010-5203

Multiple untrusted search path vulnerabilities in NCP Secure Enterprise Client before 9.21 Build 68, Secure Entry Client before 9.23 Build 18, and Secure Client - Juniper Edition before 9.23 Build 18 allow local users to gain privileges via a Trojan horse 1 dvccsabase002.dll, 2 conman.dll, 3...

CVE-2010-5218

Untrusted search path vulnerability in Dupehunter 9.0.0.3911 allows local users to gain privileges via a Trojan horse Fwpuclnt.dll file in the current working directory, as demonstrated by a directory that contains a .dhjb file. NOTE: some of these details are obtained from third party informatio...