CVE:CVE-2010-5249
CNNVD:CNNVD-201209-114
Sophos Free Encryption 2.40.1.1版本和Sophos SafeGuard PrivateCrypto 2.40.1.2版本中存在不可信搜索路径漏洞。本地攻击者可利用该漏洞通过当前目录（如包含.uti文件的目录）下的Trojan木马pcrypt0406.dll文件，获取特权。
solution:Upgrade sophos free_encryption to a higher version than 2.40.1.1,and avoid the version 2.40.1.1; Upgrade sophos safeguard_privatecrypto to a higher version than 2.40.1.2,and avoid the version 2.40.1.2