deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-4392
Published: 2012-09-05
Description: index.php in ownCloud 4.0.7 does not properly validate the oc_token cookie, which allows remote attackers to bypass authentication via a crafted oc_token cookie value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://www.openwall.com/lists/oss-security/2012/08/11/1; http://www.openwall.com/lists/oss-security/2012/09/02/2; https://github.com/owncloud/core/commit/4fd069b47906ebcf83887970c732d464dbe7d37a
CVE: CVE-2012-4393
Published: 2012-09-05
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users for requests that use (1) addBookmark.php, (2) delBookmark.php, or (3) editBookmark.php in bookmarks/ajax/; (4) calendar/delete.php, (5) calendar/edit.php, (6) calendar/new.php, (7) calendar/update.php, (8) event/delete.php, (9) event/edit.php, (10) event/move.php, (11) event/new.php, (12) import/import.php, (13) settings/setfirstday.php, (14) settings/settimeformat.php, (15) share/changepermission.php, (16) share/share.php, (17) or share/unshare.php in calendar/ajax/; (18) external/ajax/setsites.php, (19) files/ajax/delete.php, (20) files/ajax/move.php, (21) files/ajax/newfile.php, (22) files/ajax/newfolder.php, (23) files/ajax/rename.php, (24) files_sharing/ajax/email.php, (25) files_sharing/ajax/setpermissions.php, (26) files_sharing/ajax/share.php, (27) files_sharing/ajax/toggleresharing.php, (28) files_sharing/ajax/togglesharewitheveryone.php, (29) files_sharing/ajax/unshare.php, (30) files_texteditor/ajax/savefile.php, (31) files_versions/ajax/rollbackVersion.php, (32) gallery/ajax/createAlbum.php, (33) gallery/ajax/sharing.php, (34) tasks/ajax/addtask.php, (35) tasks/ajax/addtaskform.php, (36) tasks/ajax/delete.php, or (37) tasks/ajax/edittask.php in apps/; or administrators for requests that use (38) changepassword.php, (39) creategroup.php, (40) createuser.php, (41) disableapp.php, (42) enableapp.php, (43) lostpassword.php, (44) removegroup.php, (45) removeuser.php, (46) setlanguage.php, (47) setloglevel.php, (48) setquota.php, or (49) togglegroups.php in settings/ajax/.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://owncloud.org/changelog/; http://www.openwall.com/lists/oss-security/2012/08/11/1; http://www.openwall.com/lists/oss-security/2012/09/02/2
CVE: CVE-2012-4394
Published: 2012-09-05
Description: Cross-site scripting (XSS) vulnerability in apps/files/js/filelist.js in ownCloud before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via the file parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2012/08/11/1; http://www.openwall.com/lists/oss-security/2012/09/02/2; https://github.com/owncloud/core/commit/d203fa2c50f4b2791e68e2b8ab9a0f8b94f9c9f8
CVE: CVE-2012-4395
Published: 2012-09-05
Description: Cross-site scripting (XSS) vulnerability in index.php in ownCloud before 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the redirect_url parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2012/08/11/1; http://www.openwall.com/lists/oss-security/2012/09/02/2; https://github.com/owncloud/core/commit/0074062b5329c3d43679909fddce2d70608a4475
CVE: CVE-2012-4396
Published: 2012-09-05
Description: Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) file names to apps/user_ldap/settings.php; (2) url or (3) title parameter to apps/bookmarks/ajax/editBookmark.php; (4) tag or (5) page parameter to apps/bookmarks/ajax/updateList.php; (6) identity to apps/user_openid/settings.php; (7) stack name in apps/gallery/lib/tiles.php; (8) root parameter to apps/gallery/templates/index.php; (9) calendar displayname in apps/calendar/templates/part.import.php; (10) calendar uri in apps/calendar/templates/part.choosecalendar.rowfields.php; (11) title, (12) location, or (13) description parameter in apps/calendar/lib/object.php; (14) certain vectors in core/js/multiselect.js; or (15) artist, (16) album, or (17) title comments parameter in apps/media/lib_scanner.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2012/08/11/1; http://www.openwall.com/lists/oss-security/2012/09/02/2; https://github.com/owncloud/core/commit/44260a552cd4ee50ee11eee45164c725f56f7027
CVE: CVE-2012-4397
Published: 2012-09-05
Description: Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) calendar displayname to part.choosecalendar.rowfields.php or (2) part.choosecalendar.rowfields.shared.php in apps/calendar/templates/; or (3) unspecified vectors to apps/contacts/lib/vcard.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://owncloud.org/changelog/; http://www.openwall.com/lists/oss-security/2012/08/11/1; http://www.openwall.com/lists/oss-security/2012/09/02/2
CVE: CVE-2012-4752
Published: 2012-09-05
Description: appconfig.php in ownCloud before 4.0.6 does not properly restrict access, which allows remote authenticated users to edit app configurations via unspecified vectors.  NOTE: this can be leveraged by unauthenticated remote attackers using CVE-2012-4393.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://owncloud.org/changelog/; http://www.openwall.com/lists/oss-security/2012/08/11/1; http://www.openwall.com/lists/oss-security/2012/09/02/2
CVE: CVE-2012-4753
Published: 2012-09-05
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud before 4.0.5 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://owncloud.org/changelog/; http://owncloud.org/changelog/
CVE: CVE-2010-5195
Published: 2012-09-06
Description: Untrusted search path vulnerability in Roxio MyDVD 9 allows local users to gain privileges via a Trojan horse HomeUtils9.dll file in the current working directory, as demonstrated by a directory that contains a .dmsd or .dmsm file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41152; http://www.exploit-db.com/exploits/14781/; http://secunia.com/advisories/41152
CVE: CVE-2010-5196
Published: 2012-09-06
Description: Untrusted search path vulnerability in KeePass Password Safe before 2.13 allows local users to gain privileges via a Trojan horse DwmApi.dll file in the current working directory, as demonstrated by a directory that contains a .kdbx file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41167; http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/; http://www.keepass.info/news/n100906_2.13.html
CVE: CVE-2010-5197
Published: 2012-09-06
Description: Untrusted search path vulnerability in Pixia 4.70j allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .pxa file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41176; http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/; http://secunia.com/advisories/41176
CVE: CVE-2010-5198
Published: 2012-09-06
Description: Multiple untrusted search path vulnerabilities in Intuit QuickBooks 2010 allow local users to gain privileges via a Trojan horse (1) dbicudtx11.dll, (2) mfc90enu.dll, or (3) mfc90loc.dll file in the current working directory, as demonstrated by a directory that contains a .des, .qbo, or .qpg file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41221; http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/; http://secunia.com/advisories/41221
CVE: CVE-2010-5199
Published: 2012-09-06
Description: Untrusted search path vulnerability in PhotoImpact X3 13.00.0000.0 allows local users to gain privileges via a Trojan horse bwsconst.dll file in the current working directory, as demonstrated by a directory that contains a .ufp or .ufo file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41258; http://secunia.com/advisories/41258
CVE: CVE-2010-5200
Published: 2012-09-06
Description: Untrusted search path vulnerability in KeePass Password Safe before 1.18 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .kdb file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://keepass.info/news/n100902_1.18.html; http://secunia.com/advisories/41270; http://keepass.info/news/n100902_1.18.html
CVE: CVE-2010-5201
Published: 2012-09-06
Description: Untrusted search path vulnerability in MAGIX Samplitude Producer 11 allows local users to gain privileges via a Trojan horse PlayRIplA6.dll file in the current working directory, as demonstrated by a directory that contains a .vip file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41296; http://www.exploit-db.com/dll-hijacking-vulnerable-applications/; http://secunia.com/advisories/41296
CVE: CVE-2010-5202
Published: 2012-09-06
Description: Untrusted search path vulnerability in JetAudio 8.0.7.1000 Basic allows local users to gain privileges via a Trojan horse WNASPI32.DLL file in the current working directory, as demonstrated by a directory that contains a .mp3 file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41308; http://www.exploit-db.com/dll-hijacking-vulnerable-applications/; http://secunia.com/advisories/41308
CVE: CVE-2010-5203
Published: 2012-09-06
Description: Multiple untrusted search path vulnerabilities in NCP Secure Enterprise Client before 9.21 Build 68, Secure Entry Client before 9.23 Build 18, and Secure Client - Juniper Edition before 9.23 Build 18 allow local users to gain privileges via a Trojan horse (1) dvccsabase002.dll, (2) conman.dll, (3) kmpapi32.dll, or (4) ncpmon2.dll file in the current working directory, as demonstrated by a directory that contains a .pcf or .spd file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41388; http://www.ncp-e.com/fileadmin/pdf/service_support/NCP_Client_Vulnerability_Statement_EN.pdf; http://secunia.com/advisories/41388
CVE: CVE-2010-5204
Published: 2012-09-06
Description: Multiple untrusted search path vulnerabilities in IBM Lotus Symphony 1.3.0 20[PII_REDACTED] allow local users to gain privileges via a Trojan horse (1) eclipse_1114.dll or (2) emser645mi.dll file in the current working directory, as demonstrated by a directory that contains a .odm, .odt, .otp, .stc, .stw, .sxg, or .sxw file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Bibm_lotus_symphony%5D_3-beta-4_insecure_dll_hijacking; http://secunia.com/advisories/41400; http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Bibm_lotus_symphony%5D_3-beta-4_insecure_dll_hijacking
CVE: CVE-2010-5205
Published: 2012-09-06
Description: Multiple untrusted search path vulnerabilities in e-press ONE Office Author allow local users to gain privileges via a Trojan horse (1) java_msci.dll or (2) msci_java.dll file in the current working directory, as demonstrated by a directory that contains a .psw file. NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Be-press-one_office%5D_insecure_dll_hijacking; http://secunia.com/advisories/41404; http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Be-press-one_office%5D_insecure_dll_hijacking
CVE: CVE-2010-5206
Published: 2012-09-06
Description: Multiple untrusted search path vulnerabilities in e-press ONE Office E-NoteTaker and E-Zip allow local users to gain privileges via a Trojan horse (1) mfc71enu.dll or (2) mfc71loc.dll file in the current working directory, as demonstrated by a directory that contains a .txt, .rar, or .tar file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Be-press-one_office%5D_insecure_dll_hijacking; http://secunia.com/advisories/41404; http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Be-press-one_office%5D_insecure_dll_hijacking
CVE: CVE-2010-5207
Published: 2012-09-06
Description: Multiple untrusted search path vulnerabilities in CelFrame Office 2008 Standard Edition allow local users to gain privileges via a Trojan horse (1) java_msci.dll or (2) msci_java.dll file in the current working directory, as demonstrated by a directory that contains a .doc, .xls, or .odg file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Bcelframe_office%5D_2008_insecure_dll_hijacking; http://secunia.com/advisories/41405; http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Bcelframe_office%5D_2008_insecure_dll_hijacking
CVE: CVE-2010-5208
Published: 2012-09-06
Description: Multiple untrusted search path vulnerabilities in the (1) Presentation, (2) Writer, and (3) Spreadsheets components in Kingsoft Office 2010 6.6.0.2477 allow local users to gain privileges via a Trojan horse plgpf.dll file in the current working directory, as demonstrated by a directory that contains a .xls, .ppt, .rtf, or .doc file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Bkingsoft_office%5D_2010_insecure_dll_hijacking; http://secunia.com/advisories/41406; http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Bkingsoft_office%5D_2010_insecure_dll_hijacking
CVE: CVE-2010-5209
Published: 2012-09-06
Description: Multiple untrusted search path vulnerabilities in Nuance PDF Reader 6.0 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) exceptiondumpdll.dll file in the current working directory, as demonstrated by a directory that contains a .pdf file. NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Bnuance_pdf_reader%5D_6.0_insecure_dll_hijacking; http://secunia.com/advisories/41410; http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Bnuance_pdf_reader%5D_6.0_insecure_dll_hijacking
CVE: CVE-2010-5210
Published: 2012-09-06
Description: Untrusted search path vulnerability in Sorax Reader 2.0.3129.70 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .pdf file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Bsorax_pdf_reader%5D_2.0_insecure_dll_hijacking; http://secunia.com/advisories/41411; http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Bsorax_pdf_reader%5D_2.0_insecure_dll_hijacking
CVE: CVE-2010-5211
Published: 2012-09-06
Description: Untrusted search path vulnerability in ALSee 6.20.0.1 allows local users to gain privileges via a Trojan horse patchani.dll file in the current working directory, as demonstrated by a directory that contains a .ani, .bmp, .cal, .hdp, .jpe, .mac, .pbm, .pcx, .pgm, .png, .psd, .ras, .tga, or .tiff file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Balsee%5D_6.20.0.1_insecure_dll_hijacking; http://secunia.com/advisories/41415; http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Balsee%5D_6.20.0.1_insecure_dll_hijacking
CVE: CVE-2010-5212
Published: 2012-09-06
Description: Untrusted search path vulnerability in Adobe LiveCycle Designer ES2 9.0.0.20091029.1.612548 allows local users to gain privileges via a Trojan horse objectassisten_US.dll file in the current working directory, as demonstrated by a directory that contains a .tds file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41417; http://secunia.com/advisories/41417
CVE: CVE-2010-5213
Published: 2012-09-06
Description: Untrusted search path vulnerability in Adobe LiveCycle Designer 8.2.1.3144.1.471865 allows local users to gain privileges via a Trojan horse .dll file in the current working directory, as demonstrated by a directory that contains a .tds file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41417; http://www.bugreport.ir/index_74.htm; https://exchange.xforce.ibmcloud.com/vulnerabilities/78337
CVE: CVE-2010-5214
Published: 2012-09-06
Description: Untrusted search path vulnerability in Fotobook Editor 5.0 2.8.0.1 allows local users to gain privileges via a Trojan horse Fwpuclnt.dll file in the current working directory, as demonstrated by a directory that contains a .dtp file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41498; http://www.exploit-db.com/dll-hijacking-vulnerable-applications/; http://secunia.com/advisories/41498
CVE: CVE-2010-5215
Published: 2012-09-06
Description: Multiple untrusted search path vulnerabilities in SWiSH Max3 3.0 2009.11.30 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) SWiSHmax3res.dll file in the current working directory, as demonstrated by a directory that contains a .swi file. NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41533; http://www.exploit-db.com/dll-hijacking-vulnerable-applications/; http://secunia.com/advisories/41533
CVE: CVE-2010-5216
Published: 2012-09-06
Description: Untrusted search path vulnerability in LINGO 11.0.1.6 and 12.0.2.20 allows local users to gain privileges via a Trojan horse myuser.dll file in the current working directory, as demonstrated by a directory that contains a .ltf file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41573; http://secunia.com/advisories/41573
CVE: CVE-2010-5217
Published: 2012-09-06
Description: Multiple untrusted search path vulnerabilities in TuneUp Utilities 2009 8.0.3310 and 2010 9.0.4600 allow local users to gain privileges via a Trojan horse (1) wscapi.dll or (2) vclib32.dll file in the current working directory, as demonstrated by a directory that contains a .tvs file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41575; http://secunia.com/advisories/41575
CVE: CVE-2010-5218
Published: 2012-09-06
Description: Untrusted search path vulnerability in Dupehunter 9.0.0.3911 allows local users to gain privileges via a Trojan horse Fwpuclnt.dll file in the current working directory, as demonstrated by a directory that contains a .dhjb file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://packetstormsecurity.org/1010-exploits/dupehunter-dllhijack.txt; http://secunia.com/advisories/41733; http://packetstormsecurity.org/1010-exploits/dupehunter-dllhijack.txt
CVE: CVE-2010-5219
Published: 2012-09-06
Description: Untrusted search path vulnerability in SmartFTP 4.0.1140.0 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .txt, .html, or .mpg file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://packetstormsecurity.org/1010-exploits/smartftp4-dllhijack.txt; http://secunia.com/advisories/41808; http://packetstormsecurity.org/1010-exploits/smartftp4-dllhijack.txt
CVE: CVE-2010-5220
Published: 2012-09-06
Description: Untrusted search path vulnerability in MEO Encryption Software 2.02 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .meo or .cry file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://packetstormsecurity.org/1010-exploits/meo-dllhijack.txt; http://secunia.com/advisories/41843; http://packetstormsecurity.org/1010-exploits/meo-dllhijack.txt
CVE: CVE-2010-5221
Published: 2012-09-06
Description: Untrusted search path vulnerability in STDU Explorer 1.0.201 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://packetstormsecurity.org/1010-exploits/stdu-dllhijack.txt; http://secunia.com/advisories/41845; http://packetstormsecurity.org/1010-exploits/stdu-dllhijack.txt
CVE: CVE-2010-5222
Published: 2012-09-06
Description: Untrusted search path vulnerability in Ease Jukebox 1.40 allows local users to gain privileges via a Trojan horse wmaudsdk.dll file in the current working directory, as demonstrated by a directory that contains a .mp3 or .wav file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41902; http://secunia.com/advisories/41902
CVE: CVE-2010-5223
Published: 2012-09-06
Description: Multiple untrusted search path vulnerabilities in Phoenix Project Manager 2.1.0.8 allow local users to gain privileges via a Trojan horse (1) wbtrv32.dll or (2) w3btrv7.dll file in the current working directory, as demonstrated by a directory that contains a .ppx file. NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://packetstormsecurity.org/1010-exploits/phoenix-dllhijack.txt; http://secunia.com/advisories/41907; http://packetstormsecurity.org/1010-exploits/phoenix-dllhijack.txt
CVE: CVE-2010-5224
Published: 2012-09-06
Description: Untrusted search path vulnerability in Cool iPhone Ringtone Maker 2.2.3 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .mp3 file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://packetstormsecurity.org/1010-exploits/cooliphoneringtone-dllhijack.txt; http://secunia.com/advisories/41910; http://packetstormsecurity.org/1010-exploits/cooliphoneringtone-dllhijack.txt
CVE: CVE-2010-5225
Published: 2012-09-06
Description: Untrusted search path vulnerability in Babylon 8.1.0 r16 allows local users to gain privileges via a Trojan horse BESExtension.dll file in the current working directory, as demonstrated by a directory that contains a .bgl file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/42489; http://xlocux.wordpress.com/2010/11/22/babylon-pro-8-xx-dll-hijacking/; http://secunia.com/advisories/42489