CVE

Id
30110  
CVE No.
CVE-2007-6753  
Status
Candidate  
Description
Untrusted search path vulnerability in Shell32.dll in Microsoft Windows 2000, Windows XP, Windows Vista, Windows Server 2008, and Windows 7, when using an environment configured with a string such as %APPDATA% or %PROGRAMFILES% in a certain way, allows local users to gain privileges via a Trojan horse DLL under the current working directory, as demonstrated by iTunes and Safari.  
Phase
Assigned (20120328)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
318457 30110 CVE-2007-6753 MISC:http://blog.acrossecurity.com/2010/10/breaking-setdlldirectory-protection.html  View
318458 30110 CVE-2007-6753 MSKB:329308  View
318459 30110 CVE-2007-6753 URL:http://support.microsoft.com/kb/329308  View
318460 30110 CVE-2007-6753 BID:44484  View
318461 30110 CVE-2007-6753 URL:http://www.securityfocus.com/bid/44484  View
318462 30110 CVE-2007-6753 SECUNIA:41984  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23474 JVNDB-2013-005049 信頼できないパラメータを使用して生成した Dual_EC_DRBG の出力結果が推測可能な問題 Dual Elliptic Curve Deterministic Random Bit Generator (Dual_EC_DRBG) には、楕円曲線を計算するためのパラメータの信頼性に関する問題が指摘されています。 CVE-2007-6755 30110 5.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005049.html  View