CVE:CVE-2012-4880
CNNVD:CNNVD-201209-141
Sony DVD Architect是一款DVD制作软件。
DVD Architect Pro 5.2 Build 133和DVD Architect Studio 5.0 Build 156中存在多个不可信搜索路径漏洞。本地攻击者可利用该漏洞通过当前目录（如包含.dar文件的目录）下的Trojan木马(1)enc_mp2v.200或(2)CFHDDecoder.dll文件，获取特权。
solution:Upgrade sony dvd_architect_pro to a higher version than 5.2,and avoid the version 5.2; Upgrade sony dvd_architect_studio to a higher version than 5.0,and avoid the version 5.0