CVE-2011-0032 in Windows

Resumen (Inglés)

Untrusted search path vulnerability in DirectShow in Microsoft Windows Vista SP1 and SP2, Windows 7 Gold and SP1, Windows Server 2008 R2 and R2 SP1, and Windows Media Center TV Pack for Windows Vista allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Digital Video Recording (.dvr-ms), Windows Recorded TV Show (.wtv), or .mpg file, aka "DirectShow Insecure Library Loading Vulnerability."

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

2010-12-10

Divulgación

2011-03-09

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
4314	Microsoft Windows DirectShow/Windows Media escalada de privilegios	426	Prueba de concepto	Arreglo oficial	CVE-2011-0032

Fuentes

• MITRE
• NVD
• CVE Details