1037
Reference Description
CVE-2010-3397 "DLL hijacking" issue in encryption software.
https://www.cve.org/CVERecord?id=CVE-2010-3397
CVE-2010-3138 "DLL hijacking" issue in library used by multiple media players.
https://www.cve.org/CVERecord?id=CVE-2010-3138
CVE-2010-3152 "DLL hijacking" issue in illustration program.
https://www.cve.org/CVERecord?id=CVE-2010-3152
CVE-2010-3147 "DLL hijacking" issue in address book.
https://www.cve.org/CVERecord?id=CVE-2010-3147
CVE-2010-3135 "DLL hijacking" issue in network monitoring software.
https://www.cve.org/CVERecord?id=CVE-2010-3135
CVE-2010-3131 "DLL hijacking" issue in web browser.
https://www.cve.org/CVERecord?id=CVE-2010-3131
CVE-2010-1795 "DLL hijacking" issue in music player/organizer.
https://www.cve.org/CVERecord?id=CVE-2010-1795
CVE-2002-1576 Product uses the current working directory to find and execute a program,
which allows local users to gain privileges by creating a symlink that points to a
malicious version of the program.
https://www.cve.org/CVERecord?id=CVE-2002-1576
CVE-1999-1461 Product trusts the PATH environmental variable to find and execute a program,
which allows local users to obtain root access by modifying the PATH to point
to a malicous version of that program.
https://www.cve.org/CVERecord?id=CVE-1999-1461
CVE-1999-1318 Software uses a search path that includes the current working directory (.),
which allows local users to gain privileges via malicious programs.
https://www.cve.org/CVERecord?id=CVE-1999-1318
CVE-2003-0579 Admin software trusts the user-supplied -uv.install command line option to find
and execute the uv.install program, which allows local users to gain privileges
by providing a pathname that is under control of the user.
https://www.cve.org/CVERecord?id=CVE-2003-0579
CVE-2000-0854 When a document is opened, the directory of that document is first used to
locate DLLs , which could allow an attacker to execute arbitrary commands by
inserting malicious DLLs into the same directory as the document.
https://www.cve.org/CVERecord?id=CVE-2000-0854
CVE-2001-0943 Database trusts the PATH environment variable to find and execute programs,
which allows local users to modify the PATH to point to malicious programs.
https://www.cve.org/CVERecord?id=CVE-2001-0943
CVE-2001-0942 Database uses an environment variable to find and execute a program, which
allows local users to execute arbitrary programs by changing the environment
variable.
https://www.cve.org/CVERecord?id=CVE-2001-0942
CVE-2001-0507 Server uses relative paths to find system files that will run in-process, which
allows local users to gain privileges via a malicious file.
https://www.cve.org/CVERecord?id=CVE-2001-0507
CVE-2002-2017 Product allows local users to execute arbitrary code by setting an environment
variable to reference a malicious program.
https://www.cve.org/CVERecord?id=CVE-2002-2017
CVE-1999-0690 Product includes the current directory in root's PATH variable.
https://www.cve.org/CVERecord?id=CVE-1999-0690
CVE-2001-0912 Error during packaging causes product to include a hard-coded, non-standard
directory in search path.
https://www.cve.org/CVERecord?id=CVE-2001-0912
CVE-2001-0289 Product searches current working directory for configuration file.
https://www.cve.org/CVERecord?id=CVE-2001-0289
CWE Version 4.14
CWE-427: Uncontrolled Search Path Element
CWE-427: Uncontrolled Search Path Element