CVE-2010-3159

Untrusted search path vulnerability in Explzh 5.67 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory...

Design/Logic Flaw

Untrusted search path vulnerability in TeraPad before 1.00 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

Design/Logic Flaw

Untrusted search path vulnerability in Apsaly before 3.74 allows local users to gain privileges via a Trojan horse executable file in the current working directory...

Design/Logic Flaw

Untrusted search path vulnerability in Archive Decoder 1.23 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory...

Design/Logic Flaw

Untrusted search path vulnerability in Explzh 5.67 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory...

Design/Logic Flaw

Untrusted search path vulnerability in Fenrir Sleipnir 2.9.4 and earlier and Grani 4.3 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory...

Design/Logic Flaw

Untrusted search path vulnerability in Fenrir Sleipnir before 2.9.5 and Grani before 4.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

CVE-2010-3161

Untrusted search path vulnerability in TeraPad before 1.00 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

CVE-2010-3162

Apsaly (desktop text editor) is affected by an untrusted search path vulnerability in versions before 3.74. The issue arises from how Apsaly loads executables, which can insecurely load a Trojan horse file from the current working directory or during certain actions, enabling local privilege elev...

CVE-2010-3161

CVE-2010-3161 affects TeraPad (pre-1.00), where unsafe DLL loading due to the DLL search path can be exploited by placing a Trojan DLL in the current working directory. This untrusted search path vulnerability may allow local attackers to execute arbitrary code with the application’s privileges. ...

CVE-2010-3159

CVE-2010-3159 affects Explzh up to version 5.67, where an unsafe file search path may cause loading of unintended executables (.exe) when extracting files. This could allow an attacker to execute arbitrary code with the application’s privileges. Root cause: insecure executable loading due to how ...

CVE-2010-3164

CVE-2010-3164 affects Fenrir Sleipnir (2.9.4 and earlier) and Grani (4.3 and earlier). The vulnerability is an untrusted search path that may allow a local attacker to gain privileges by placing a Trojan horse executable in the current working directory, enabling arbitrary code execution with the...

CVE-2010-3164

Untrusted search path vulnerability in Fenrir Sleipnir 2.9.4 and earlier and Grani 4.3 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory...

CVE-2010-3165

Untrusted search path vulnerability (CVE-2010-3165) affects multiple Yokka products, including NoEditor <=1.33.1.1, OuiEditor <=1.6.1.1, UnEditor <=1.10.1.2, DeuxEditor <=1.7.1.2, SQLEditorXP <=3.14.1.2, SQLEditorTE <=1.9.1.3, SQLEditor8 <=3.8.1.2, and SQLEditorClassic

Security Week In Review: Evercookies, SQL Slammer and a Flood of Patches

This week seemed to be all about the numbers as a handful of reports were released, disclosing new stats on phishing, information theft and spam. Evercookies, the inside story of SQL Slammer, and of course, the usual array of patches, rounded out the week. Read on for the full week in review. The...

Design/Logic Flaw

Untrusted search path vulnerability in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory...

CVE-2010-3181

Untrusted search path vulnerability in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory...

Report: Phishing Activity is Down (And That's A Bad Thing)

The number of phishing attacks declined in the first half of 2010, but a report from the Anti Phishing Working Group warns that might not be such a good thing. The group released its Global Phishing Survey on Monday covering the first six months of 2010. Overall, the survey reported a steep decli...

CVE-2010-3364

The vips-7.22 script in VIPS 7.22.2 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2010-3376

The 1 proofserv, 2 xrdcp, 3 xrdpwdadmin, and 4 xrd scripts in ROOT 5.18/00 place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...