EUVD-2012-4682

Malware in sbrugna...

EUVD-2013-1739

Malware in sbrugna...

CVE-2011-5158

Multiple untrusted search path vulnerabilities in the DMTGUI2.EXE and DvInesLogFileViewer.Exe components in DATEV Grundpaket Basis CD23.20 allow local users to gain privileges via a Trojan horse 1 DVBSKNLANG101.dll or 2 DvZediTermSrvInfo004.dll file in the current working directory, as demonstrat...

CVE-2015-0833

CVE-2015-0833 affects Mozilla Firefox (pre-36.0), Firefox ESR (pre-31.x up to 31.5), and Thunderbird (pre-31.5) on Windows. It is a local privilege-escalation via untrusted search paths where a Trojan horse DLL (e.g., bcrypt.dll) in the current working directory or a temporary directory is loaded...

CVE-2014-8394

Corel CAD 2014 is affected by CVE-2014-8394 due to DLL hijacking from untrusted search paths. When a Corel CAD 2014-related file is opened, the application looks for a DLL in its directory and can execute arbitrary code if a malicious DLL named FxManagedCommands_3.08_9.tx or TD_Mgd_3.08_9.dll is ...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in Adobe Device Central CS4 2.0.0 0476 allow local users to gain privileges via a Trojan horse 1 ibfs32.dll or 2 amtcdb.dll file in the current working directory, as demonstrated by a directory that contains a .adcp file. NOTE: some of these details...

CVE-2012-4883

CVE-2012-4883 affects 3DVIA Composer V6R2012 HF1 Build 6.8.1.1652. The issue is an untrusted search path vulnerability that lets local users gain privileges via a Trojan horse (dwmapi.dll or ibfs32.dll) placed in the current working directory, demonstrated by a directory containing a .smg file. T...

CVE-2010-5243

CVE-2010-5243 : The provided documents identify a vulnerability in Cyberlink Power2Go 7.0.0.0816 caused by untrusted search paths. Local users can gain privileges via loading either dwmapi.dll or MFC71LOC.DLL from the current working directory, with exploitation demonstrated by directories contai...

CVE-2010-5223

Phoenix Project Manager 2.1.0.8 is affected by multiple untrusted search path vulnerabilities that allow local privilege escalation when a user places one of the DLLs (wbtrv32.dll or w3btrv7.dll) in the current working directory and opens a .ppx file. The issue relies on DLL search order in the p...

CVE-2010-5206

CVE-2010-5206 concerns multiple untrusted search path vulnerabilities in the product family named e-press ONE Office E-NoteTaker and E-Zip. The issue allows local users to gain privileges by placing Trojan horse DLLs (1) mfc71enu.dll or (2) mfc71loc.dll) in the current working directory, demonstr...

CVE-2012-4754

CVE-2012-4754 affects MindManager 2012 (version 10.0.493). The issue is an untrusted search path vulnerability where local users can gain privileges via a Trojan horse placed in the current working directory (notably using either ssgp.dll or dwmapi.dll), demonstrated by a directory containing a ....

CVE-2012-4756

CVE-2012-4756 affects CyberLink LabelPrint 2.5.3602, where local users can gain privileges via untrusted search path using (1) mfc71loc.dll or (2) mfc71enu.dll in the current working directory, demonstrated by a directory containing a .lpp file. The issue stems from untrusted search paths allowin...

CVE-2012-4758

CVE-2012-4758 concerns CyberLink PowerProducer 5.5.3.2325, where multiple untrusted search path vulnerabilities allow local users to elevate privileges via Trojan horse files (mfc71loc.dll or mfc71enu.dll) placed in the current working directory, demonstrated by a directory containing a .ppp or ....

CVE-2011-4061

CVE-2011-4061 affects IBM DB2 9.7 (and 9.5) when ITMA (Tivoli Monitoring Agent) is bundled with DB2 on UNIX/Linux platforms. The vulnerability arises from insecure DT_RPATH-based loading of libkbb.so via the SUID-root binary kbbacf1 in the ITMA component, allowing a local user to escalate privile...

PDFjam: Multiple vulnerabilities

Background PDFjam is a small collection of shell scripts to edit PDF documents, including pdfnup, pdfjoin and pdf90. Description Martin Vaeth reported multiple untrusted search path vulnerabilities CVE-2008-5843. Marcus Meissner of the SUSE Security Team reported that temporary files are created...