CVE-2010-2368

Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse DLL in the current working directory.

Score

CVSS 2.0 6.9 Medium

Status

Modified - cve@mitre.org

Published

2010-10-18

Last modified

2024-08-07

Affected products

• Lhaplus (Lhaplus)

References

• http://jvn.jp/en/jp/JVN82752978/index.html
• http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000037.html
• http://secunia.com/advisories/41742
• http://www.ipa.go.jp/about/press/20101012.html
• http://www7a.biglobe.ne.jp/~schezo/dll_vul.html