CVE

Id
49887  
CVE No.
CVE-2011-1975  
Status
Candidate  
Description
Untrusted search path vulnerability in the Data Access Tracing component in Windows Data Access Components (Windows DAC) 6.0 in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an Excel .xlsx file, aka "Data Access Components Insecure Library Loading Vulnerability."  
Phase
Assigned (20110509)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
541461 49887 CVE-2011-1975 MS:MS11-059  View
541462 49887 CVE-2011-1975 URL:http://www.microsoft.com/technet/security/Bulletin/MS11-059.mspx  View
541463 49887 CVE-2011-1975 CERT:TA11-221A  View
541464 49887 CVE-2011-1975 URL:http://www.us-cert.gov/cas/techalerts/TA11-221A.html  View
541465 49887 CVE-2011-1975 OVAL:oval:org.mitre.oval:def:12936  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
32171 JVNDB-2011-002411 Microsoft Office 2003 および 2007 における権限昇格の脆弱性 Microsoft Office 2003 および 2007 には、検索パスに関する処理に不備があるため、権限を取得される脆弱性が存在します。 CVE-2011-1980 49887 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002411.html  View