CVE-2010-5203

Multiple untrusted search path vulnerabilities in NCP Secure Enterprise Client before 9.21 Build 68, Secure Entry Client before 9.23 Build 18, and Secure Client - Juniper Edition before 9.23 Build 18 allow local users to gain privileges via a Trojan horse 1 dvccsabase002.dll, 2 conman.dll, 3...

CVE-2010-5218

Untrusted search path vulnerability in Dupehunter 9.0.0.3911 allows local users to gain privileges via a Trojan horse Fwpuclnt.dll file in the current working directory, as demonstrated by a directory that contains a .dhjb file. NOTE: some of these details are obtained from third party informatio...

CVE-2011-5153

Untrusted search path vulnerability in FotoSlate 4.0 Build 146 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .plp file. NOTE: the provenance of this information is unknown; the details are...

CVE-2010-5202

CVE-2010-5202 affects JetAudio 8.0.7.1000 Basic. It is described as an untrusted search path vulnerability that allows local users to gain privileges via a Trojan horse WNASPI32.DLL file placed in the current working directory, demonstrated with a directory containing a .mp3 file. The vulnerabili...

CVE-2010-5207

Multiple untrusted search path vulnerabilities in CelFrame Office 2008 Standard Edition allow local users to gain privileges via a Trojan horse 1 javamsci.dll or 2 mscijava.dll file in the current working directory, as demonstrated by a directory that contains a .doc, .xls, or .odg file. NOTE: so...

CVE-2012-4758

CVE-2012-4758 concerns CyberLink PowerProducer 5.5.3.2325, where multiple untrusted search path vulnerabilities allow local users to elevate privileges via Trojan horse files (mfc71loc.dll or mfc71enu.dll) placed in the current working directory, demonstrated by a directory containing a .ppp or ....

CVE-2010-5211

Untrusted search path vulnerability in ALSee 6.20.0.1 allows local users to gain privileges via a Trojan horse patchani.dll file in the current working directory, as demonstrated by a directory that contains a .ani, .bmp, .cal, .hdp, .jpe, .mac, .pbm, .pcx, .pgm, .png, .psd, .ras, .tga, or .tiff...

CVE-2010-5200

KeePass Password Safe prior to 1.18 is vulnerable to an untrusted search path/LPE via a Trojan horse DLL placed in the current working directory, demonstrated by a directory containing a .kdb file. Affected products: KeePass Password Safe versions 1.17 and earlier. Root cause: DLL hijack in the c...

CVE-2010-5200

Untrusted search path vulnerability in KeePass Password Safe before 1.18 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .kdb file. NOTE: some of these details are obtained from third party information...

CVE-2010-5224

Untrusted search path vulnerability in Cool iPhone Ringtone Maker 2.2.3 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .mp3 file. NOTE: some of these details are obtained from third party...

CVE-2010-5202

Untrusted search path vulnerability in JetAudio 8.0.7.1000 Basic allows local users to gain privileges via a Trojan horse WNASPI32.DLL file in the current working directory, as demonstrated by a directory that contains a .mp3 file. NOTE: some of these details are obtained from third party...

CVE-2010-5213

Untrusted search path vulnerability in Adobe LiveCycle Designer 8.2.1.3144.1.471865 allows local users to gain privileges via a Trojan horse .dll file placed in the current working directory, demonstrated by a directory containing a .tds file. Note: some details are from third party information. ...

CVE-2010-5209

CVE-2010-5209 describes multiple untrusted search path vulnerabilities in Nuance PDF Reader 6.0 that allow local users to gain privileges via a Trojan horse when a malicious DLL is placed in the current working directory (either dwmapi.dll or exceptiondumpdll.dll ) and a PDF is present in that di...

CVE-2010-5217

The CVE-2010-5217 entry concerns TuneUp Utilities 2009 8.0.3310 and 2010 9.0.4600. The issue is a privilege-escalation vulnerability caused by untrusted search paths: local users can gain privileges by placing a Trojan horse file (either wscapi.dll or vclib32.dll) in the current working directory...

CVE-2010-5207

CVE-2010-5207 affects CelFrame Office 2008 Standard Edition. It is a local privilege escalation via untrusted search path: a Trojan horse can be introduced by placing (1) java_msci.dll or (2) msci_java.dll in the current working directory, demonstrated with a directory containing a .doc, .xls, or...

CVE-2010-5195

CVE-2010-5195 affects Roxio MyDVD 9 and is described as an untrusted search path vulnerability. Local attackers can gain privileges by placing a Trojan horse HomeUtils9.dll in the current working directory, with the exploit demonstrated by a directory containing a .dmsd or .dmsm file. Root cause:...

CVE-2010-5196

CVE-2010-5196 concerns KeePass Password Safe prior to 2.13, where an untrusted search path allows local privilege escalation via a Trojan horse DwmApi.dll in the current working directory when a .kdbx file is present. The issue is caused by loading a malicious DLL from the CWD, enabling a local u...

CVE-2010-5204

Multiple untrusted search path vulnerabilities in IBM Lotus Symphony 1.3.0 20090908.0900 allow local users to gain privileges via a Trojan horse 1 eclipse1114.dll or 2 emser645mi.dll file in the current working directory, as demonstrated by a directory that contains a .odm, .odt, .otp, .stc, .stw...

CVE-2010-5216

The CVE-2010-5216 issue affects LINGO 11.0.1.6 and 12.0.2.20, with an untrusted search path vulnerability that lets local users gain privileges via a Trojan horse myuser.dll in the current working directory, demonstrated by a directory containing a .ltf file. Root cause is untrusted search path h...

CVE-2010-5197

Untrusted search path vulnerability in Pixia 4.70j allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .pxa file. NOTE: some of these details are obtained from third party information...