CVE-2010-5261 - Untrusted search path vulnerability in SnowFox Total Video Converter 2.5.1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .avi file

Back Back to CVE browser

MEDIUM

Untrusted search path vulnerability in SnowFox Total Video Converter 2.5.1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .avi file

Published Sep 7, 2012

6.9

MEDIUM

CVSS 2.0

EPSS 0.40%

Description

Untrusted search path vulnerability in SnowFox Total Video Converter 2.5.1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .avi file. NOTE: some of these details are obtained from third party information.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

http://secunia.com/advisories/41527
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/dll-hijacking-vulnerable-applications/
x_refsource_MISC

Link	Providers	Tags
http://secunia.com/advisories/41527		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/dll-hijacking-vulnerable-applications/		x_refsource_MISC

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 7, 2012

Updated Sep 16, 2024

Reserved Sep 7, 2012

Link CVE-2010-5261

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2010-5261

Red Hat

Severity n/a

Public date n/a

Links CVE-2010-5261