Description
Untrusted search path vulnerability in Shell32.dll in Microsoft Windows 2000, Windows XP, Windows Vista, Windows Server 2008, and Windows 7, when using an environment configured with a string such as %APPDATA% or %PROGRAMFILES% in a certain way, allows local users to gain privileges via a Trojan horse DLL under the current working directory, as demonstrated by iTunes and Safari.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/44484
Vendor Advisory vendor-advisory
x_refsource_mskb
http://support.microsoft.com/kb/329308
Various Sources x_refsource_misc
http://blog.acrossecurity.com/2010/10/breaking-setdlldirectory-protection.html
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/41984
Scores
EPSS
0.0182
EPSS Percentile
76.6%
Details
Status
published
Products (5)
microsoft/windows_2000
microsoft/windows_7
microsoft/windows_server_2008
microsoft/windows_vista
microsoft/windows_xp
Published
Mar 28, 2012
Tracked Since
Feb 18, 2026