Most recent entries from all

bdu:2019-04873

cnvd-2019-05903

EUVD-2026-50582

fkie_cve-2019-5921

Untrusted search path vulnerability in Windows 7 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

GHSA-c363-m38v-37q6

Untrusted search path vulnerability in Windows 7 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

gsd-2019-5921

jvndb-2019-000013

In standard DLL files provided by Windows 7, there are some DLL files read from the same directory where the program resides when executing the program (CWE-427). Microsoft states that the root cause of this vulnerability is "Application Directory (App Dir) DLL planting", thus there is no plan to release any security updates for Windows 7 to address this issue. For details, refer to "Application Directory (App Dir) DLL planting" released by Microsoft. Takashi Yoshikawa of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.