deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-3129
Published: 2010-08-26
Description: Untrusted search path vulnerability in uTorrent 2.0.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse plugin_dll.dll, userenv.dll, shfolder.dll, dnsapi.dll, dwmapi.dll, iphlpapi.dll, dhcpcsvc.dll, dhcpcsvc6.dll, or rpcrtremote.dll that is located in the same folder as a .torrent or .btsearch file.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/41051; http://www.exploit-db.com/exploits/14726; http://www.exploit-db.com/exploits/14748
CVE: CVE-2010-3130
Published: 2010-08-26
Description: Untrusted search path vulnerability in TechSmith Snagit all versions 10.x and 11.x allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a snag, snagcc, or snagprof file.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/41124; http://www.exploit-db.com/exploits/14764; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6668
CVE: CVE-2010-3131
Published: 2010-08-26
Description: Untrusted search path vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 on Windows XP allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .htm, .html, .jtx, .mfp, or .eml file.
CVSS Score: 9.3 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html; http://secunia.com/advisories/41095; http://secunia.com/advisories/41168
CVE: CVE-2010-3132
Published: 2010-08-26
Description: Untrusted search path vulnerability in Adobe Dreamweaver CS5 11.0 build 4916, build 4909, and probably other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) mfc90loc.dll or (2) dwmapi.dll that is located in the same folder as a CSS, PHP, ASP, or other file that automatically launches Dreamweaver.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/41110; http://www.exploit-db.com/exploits/14740; http://www.vupen.com/english/advisories/2010/2171
CVE: CVE-2010-3133
Published: 2010-08-26
Description: Untrusted search path vulnerability in Wireshark 0.8.4 through 1.0.15 and 1.2.0 through 1.2.10 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse airpcap.dll, and possibly other DLLs, that is located in the same folder as a file that automatically launches Wireshark.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/41064; http://www.exploit-db.com/exploits/14721/; http://www.vupen.com/english/advisories/2010/2165
CVE: CVE-2010-3134
Published: 2010-08-26
Description: Untrusted search path vulnerability in Google Earth 5.1.3535.3218 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse quserex.dll that is located in the same folder as a .kmz file.
CVSS Score: 9.3 (HIGH)
References: http://www.exploit-db.com/exploits/14790; https://exchange.xforce.ibmcloud.com/vulnerabilities/64484; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7553
CVE: CVE-2010-3135
Published: 2010-08-26
Description: Untrusted search path vulnerability in Cisco Packet Tracer 5.2 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll that is located in the same folder as a .pkt or .pkz file.
CVSS Score: 9.3 (HIGH)
References: http://www.exploit-db.com/exploits/14774; https://exchange.xforce.ibmcloud.com/vulnerabilities/64483; http://www.exploit-db.com/exploits/14774
CVE: CVE-2010-3136
Published: 2010-08-26
Description: Untrusted search path vulnerability in Skype 4.2.0.169 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wab32.dll that is located in the same folder as a .skype file.
CVSS Score: 9.3 (HIGH)
References: http://www.exploit-db.com/exploits/14766; https://exchange.xforce.ibmcloud.com/vulnerabilities/64577; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11833
CVE: CVE-2010-3137
Published: 2010-08-26
Description: Untrusted search path vulnerability in Nullsoft Winamp 5.581, and probably other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wnaspi32.dll that is located in the same folder as a .669, .aac, .aiff, .amf, .au, .avr, .b4s, .caf or .cda file.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/41093; http://www.cs.ucdavis.edu/research/tech-reports/2010/CSE-2010-2.pdf; http://www.exploit-db.com/exploits/14789
CVE: CVE-2009-3743
Published: 2010-08-26
Description: Off-by-one error in the Ins_MINDEX function in the TrueType bytecode interpreter in Ghostscript before 8.71 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a malformed TrueType font in a document that trigger an integer overflow and a heap-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://security.gentoo.org/glsa/glsa-201412-17.xml; http://www.kb.cert.org/vuls/id/644319; http://www.kb.cert.org/vuls/id/JALR-87YGN8
CVE: CVE-2010-2837
Published: 2010-08-26
Description: The SIPStationInit implementation in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.1SU before 6.1(5)SU1, 7.0SU before 7.0(2a)SU3, 7.1SU before 7.1(3b)SU2, 7.1 before 7.1(5), and 8.0 before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP message, aka Bug ID CSCtd17310.
CVSS Score: 7.8 (HIGH)
References: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b43908.shtml; http://www.vupen.com/english/advisories/2010/2187; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b43908.shtml
CVE: CVE-2010-2838
Published: 2010-08-26
Description: The SendCombinedStatusInfo implementation in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.0SU before 7.0(2a)SU3, 7.1 before 7.1(5), and 8.0 before 8.0(3) allows remote attackers to cause a denial of service (process failure) via a malformed SIP REGISTER message, aka Bug ID CSCtf66305.
CVSS Score: 7.8 (HIGH)
References: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b43908.shtml; http://www.vupen.com/english/advisories/2010/2187; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b43908.shtml
CVE: CVE-2010-2839
Published: 2010-08-26
Description: SIPD in Cisco Unified Presence 6.x before 6.0(7) and 7.x before 7.0(8) allows remote attackers to cause a denial of service (stack memory corruption and process failure) via a malformed SIP message, aka Bug ID CSCtd14474.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b43909.shtml; http://www.vupen.com/english/advisories/2010/2186; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b43909.shtml
CVE: CVE-2010-2840
Published: 2010-08-26
Description: The Presence Engine (PE) service in Cisco Unified Presence 6.x before 6.0(7) and 7.x before 7.0(8) does not properly handle an erroneous Contact field in the header of a SIP SUBSCRIBE message, which allows remote attackers to cause a denial of service (process failure) via a malformed message, aka Bug ID CSCtd39629.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b43909.shtml; http://www.vupen.com/english/advisories/2010/2186; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b43909.shtml
CVE: CVE-2010-2863
Published: 2010-08-26
Description: Adobe Shockwave Player before 11.5.8.612 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb10-20.html; http://www.securitytracker.com/id?1024361; http://www.vupen.com/english/advisories/2010/2176
CVE: CVE-2010-2864
Published: 2010-08-26
Description: IML32.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files, which allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a malformed file containing an invalid value, as demonstrated by a value at position 0x24C6 of a certain file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb10-20.html; http://www.securityfocus.com/archive/1/513334/100/0/threaded; http://www.securitytracker.com/id?1024361
CVE: CVE-2010-2865
Published: 2010-08-26
Description: Unspecified vulnerability in Adobe Shockwave Player before 11.5.8.612 allows attackers to cause a denial of service via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://www.adobe.com/support/security/bulletins/apsb10-20.html; http://www.securitytracker.com/id?1024361; http://www.vupen.com/english/advisories/2010/2176
CVE: CVE-2010-2866
Published: 2010-08-26
Description: Integer signedness error in the DIRAPI module in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a count value associated with an "undocumented structure" and the tSAC chunk in a Director movie.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://dvlabs.tippingpoint.com/advisory/TPTI-10-13; http://www.adobe.com/support/security/bulletins/apsb10-20.html; http://www.securityfocus.com/archive/1/513301/100/0/threaded
CVE: CVE-2010-2867
Published: 2010-08-26
Description: DIRAPIX.dll in Adobe Shockwave Player before 11.5.8.612 does not properly handle a certain return value associated with the rcsL chunk in a Director movie, which allows remote attackers to cause a denial of service (heap memory corruption) or execute arbitrary code via a crafted movie, related to a "pointer offset vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://dvlabs.tippingpoint.com/advisory/TPTI-10-14; http://www.adobe.com/support/security/bulletins/apsb10-20.html; http://www.securityfocus.com/archive/1/513299/100/0/threaded
CVE: CVE-2010-2868
Published: 2010-08-26
Description: IML32.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a malformed file containing an invalid value, as demonstrated by a value at position 0x320D of a certain file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb10-20.html; http://www.securityfocus.com/archive/1/513333/100/0/threaded; http://www.securitytracker.com/id?1024361
CVE: CVE-2010-2869
Published: 2010-08-26
Description: IML32.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files, which allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a malformed file containing an invalid value, as demonstrated by a value at position 0x3712 of a certain file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb10-20.html; http://www.securityfocus.com/archive/1/513329/100/0/threaded; http://www.securitytracker.com/id?1024361
CVE: CVE-2010-2870
Published: 2010-08-26
Description: DIRAPIX.dll in Adobe Shockwave Player before 11.5.8.612 does not properly validate a certain chunk size in the mmap chunk in a Director movie, which allows remote attackers to cause a denial of service (heap memory corruption) or execute arbitrary code via a crafted movie.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://dvlabs.tippingpoint.com/advisory/TPTI-10-15; http://www.adobe.com/support/security/bulletins/apsb10-20.html; http://www.securityfocus.com/archive/1/513303/100/0/threaded
CVE: CVE-2010-2871
Published: 2010-08-26
Description: Integer overflow in the 3D object functionality in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service (heap memory corruption) or execute arbitrary code via a crafted size value in a 0xFFFFFF45 RIFF record in a Director movie.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://www.adobe.com/support/security/bulletins/apsb10-20.html; http://www.securityfocus.com/archive/1/513305/100/0/threaded; http://www.securitytracker.com/id?1024361
CVE: CVE-2010-2872
Published: 2010-08-26
Description: Adobe Shockwave Player before 11.5.8.612 does not properly validate an offset value in the pami RIFF chunk in a Director movie, which allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted movie.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.adobe.com/support/security/bulletins/apsb10-20.html; http://www.securityfocus.com/archive/1/513306/100/0/threaded; http://www.securitytracker.com/id?1024361
CVE: CVE-2010-2873
Published: 2010-08-26
Description: Adobe Shockwave Player before 11.5.8.612 does not properly validate offset values in the rcsL RIFF chunks of (1) .DIR and (2) .DCR Director movies, which allows remote attackers to cause a denial of service (heap memory corruption) or execute arbitrary code via a crafted movie.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.adobe.com/support/security/bulletins/apsb10-20.html; http://www.securityfocus.com/archive/1/513307/100/0/threaded; http://www.securityfocus.com/bid/42682
CVE: CVE-2010-2875
Published: 2010-08-26
Description: Integer signedness error in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a length value associated with the tSAC chunk in a Director movie.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=878; http://www.adobe.com/support/security/bulletins/apsb10-20.html; http://www.securitytracker.com/id?1024361
CVE: CVE-2010-2876
Published: 2010-08-26
Description: Adobe Shockwave Player before 11.5.8.612 does not properly validate values associated with buffer-size calculation for a 0xFFFFFFF8 record in a (1) .dir or (2) .dcr Director movie, which allows remote attackers to cause a denial of service (heap memory corruption) or execute arbitrary code via a crafted movie.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.adobe.com/support/security/bulletins/apsb10-20.html; http://www.securityfocus.com/archive/1/513312/100/0/threaded; http://www.securitytracker.com/id?1024361
CVE: CVE-2010-2877
Published: 2010-08-26
Description: Adobe Shockwave Player before 11.5.8.612 does not properly validate a count value in a Director movie, which allows remote attackers to cause a denial of service (heap memory corruption) or execute arbitrary code via a crafted movie, related to IML32X.dll and DIRAPIX.dll.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://dvlabs.tippingpoint.com/advisory/TPTI-10-09; http://www.adobe.com/support/security/bulletins/apsb10-20.html; http://www.securityfocus.com/archive/1/513296/100/0/threaded
CVE: CVE-2010-2878
Published: 2010-08-26
Description: DIRAPIX.dll in Adobe Shockwave Player before 11.5.8.612 does not properly validate a value associated with a buffer seek for a Director movie, which allows remote attackers to cause a denial of service (heap memory corruption) or execute arbitrary code via a crafted movie.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://dvlabs.tippingpoint.com/advisory/TPTI-10-10; http://www.adobe.com/support/security/bulletins/apsb10-20.html; http://www.securityfocus.com/archive/1/513298/100/0/threaded
CVE: CVE-2010-2879
Published: 2010-08-26
Description: Multiple integer overflows in the allocator in the TextXtra.x32 module in Adobe Shockwave Player before 11.5.8.612 allow remote attackers to cause a denial of service (heap memory corruption) or execute arbitrary code via a crafted (1) element count or (2) element size value in a file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://dvlabs.tippingpoint.com/advisory/TPTI-10-12; http://www.adobe.com/support/security/bulletins/apsb10-20.html; http://www.securityfocus.com/archive/1/513300/100/0/threaded
CVE: CVE-2010-2880
Published: 2010-08-26
Description: DIRAPI.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files, which allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a malformed file containing an invalid value, as demonstrated by a value at position 0x47 of a certain file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb10-20.html; http://www.securityfocus.com/archive/1/513331/100/0/threaded; http://www.securitytracker.com/id?1024361
CVE: CVE-2010-2881
Published: 2010-08-26
Description: IML32.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files, which allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a malformed file containing an invalid value, as demonstrated by a value at position 0x24C0 of a certain file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb10-20.html; http://www.securityfocus.com/archive/1/513328/100/0/threaded; http://www.securitytracker.com/id?1024361
CVE: CVE-2010-2882
Published: 2010-08-26
Description: DIRAPI.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files, which allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a malformed file containing an invalid value, as demonstrated by a value at position 0x3812 of a certain file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb10-20.html; http://www.securityfocus.com/archive/1/513339/100/0/threaded; http://www.securitytracker.com/id?1024361
CVE: CVE-2010-3138
Published: 2010-08-27
Description: Untrusted search path vulnerability in the Indeo Codec in iac25_32.ax in Microsoft Windows XP SP3 allows local users to gain privileges via a Trojan horse iacenc.dll file in the current working directory, as demonstrated by access through BS.Player or Media Player Classic to a directory that contains a .avi, .mka, .ra, or .ram file, aka "Indeo Codec Insecure Library Loading Vulnerability." NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/67588; http://secunia.com/advisories/41114; http://www.exploit-db.com/exploits/14765
CVE: CVE-2010-3139
Published: 2010-08-27
Description: Untrusted search path vulnerability in Microsoft Windows Progman Group Converter (grpconv.exe) allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse imm.dll that is located in the same folder as a .grp file.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/67535; http://secunia.com/advisories/41136; http://www.exploit-db.com/exploits/14758
CVE: CVE-2010-3140
Published: 2010-08-27
Description: Untrusted search path vulnerability in Microsoft Windows Internet Communication Settings on Windows XP SP3 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse schannel.dll that is located in the same folder as an ISP file.
CVSS Score: 9.3 (HIGH)
References: http://www.exploit-db.com/exploits/14780; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6743; http://www.exploit-db.com/exploits/14780
CVE: CVE-2010-3141
Published: 2010-08-27
Description: Untrusted search path vulnerability in Microsoft PowerPoint 2010 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse pptimpconv.dll that is located in the same folder as a .odp, .pot, .potm, .potx, .ppa, .pps, .ppsm, .ppsx, .ppt, .pptm, .pptx, .pwz, .sldm, or .sldx file.
CVSS Score: 9.3 (HIGH)
References: http://www.exploit-db.com/exploits/14723/; http://www.exploit-db.com/exploits/14723/
CVE: CVE-2010-3142
Published: 2010-08-27
Description: Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse rpawinet.dll that is located in the same folder as a .odp, .pothtml, .potm, .potx, .ppa, .ppam, .pps, .ppt, .ppthtml, .pptm, .pptxml, .pwz, .sldm, .sldx, and .thmx file.
CVSS Score: 9.3 (HIGH)
References: http://www.exploit-db.com/exploits/14782/; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12219; http://www.exploit-db.com/exploits/14782/
CVE: CVE-2010-3143
Published: 2010-08-27
Description: Untrusted search path vulnerability in Microsoft Windows Contacts allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wab32res.dll that is located in the same folder as a .contact, .group, .p7c, .vcf, or .wab file.  NOTE: the codebase for this product may overlap the codebase for the product referenced in CVE-2010-3147.
CVSS Score: 9.3 (HIGH)
References: http://www.exploit-db.com/exploits/14778/; https://exchange.xforce.ibmcloud.com/vulnerabilities/64446; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7224
CVE: CVE-2010-3144
Published: 2010-08-27
Description: Untrusted search path vulnerability in the Internet Connection Signup Wizard in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse smmscrpt.dll file in the current working directory, as demonstrated by a directory that contains an ISP or INS file, aka "Internet Connection Signup Wizard Insecure Library Loading Vulnerability."
CVSS Score: 9.3 (HIGH)
References: http://www.exploit-db.com/exploits/14754/; http://www.securitytracker.com/id?1024879; http://www.us-cert.gov/cas/techalerts/TA10-348A.html
CVE: CVE-2010-3145
Published: 2010-08-27
Description: Untrusted search path vulnerability in the BitLocker Drive Encryption API, as used in sdclt.exe in Backup Manager in Microsoft Windows Vista SP1 and SP2, allows local users to gain privileges via a Trojan horse fveapi.dll file in the current working directory, as demonstrated by a directory that contains a Windows Backup Catalog (.wbcat) file, aka "Backup Manager Insecure Library Loading Vulnerability."
CVSS Score: 9.3 (HIGH)
References: http://www.exploit-db.com/exploits/14751/; http://www.securitytracker.com/id?1024948; http://www.us-cert.gov/cas/techalerts/TA11-011A.html
CVE: CVE-2010-3146
Published: 2010-08-27
Description: Multiple untrusted search path vulnerabilities in Microsoft Groove 2007 SP2 allow local users to gain privileges via a Trojan horse (1) mso.dll or (2) GroovePerfmon.dll file in the current working directory, as demonstrated by a directory that contains a Groove vCard (.vcg) or Groove Tool Archive (.gta) file, aka "Microsoft Groove Insecure Library Loading Vulnerability."
CVSS Score: 9.3 (HIGH)
References: http://www.exploit-db.com/exploits/14746/; http://www.us-cert.gov/cas/techalerts/TA11-067A.html; http://www.vupen.com/english/advisories/2010/2188