CVE-2010-5272

CVE-2010-5272 affects Altova DatabaseSpy 2011 Enterprise Edition SP1, due to an untrusted search path involving a dwmapi.dll loaded from the current working directory. This allows local privilege escalation when a user opens a folder containing a crafted .qprj file. The data here does not specify...