CVE-2013-3485

CVE-2013-3485 describes a Windows vulnerability in Soda PDF (v4.x/v5.x variants referenced) where local users can exploit insecure library loading via untrusted search path by placing a Trojan horse DLL in the current working directory. Specifically, loading (1) dwmapi.dll or (2) api-ms-win-core-...