CVE-2012-0016

Microsoft Expression Design (including SP1 and versions 2–4) is affected by a DLL search path vulnerability in wintab32.dll loading. An attacker can place a malicious wintab32.dll in a directory that Expression Design loads from (e.g., .xpr/.DESIGN file locations or network shares), allowing code...