CVE-2010-5196

Published: Sep 6, 2012Modified: Apr 29, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

Untrusted search path vulnerability in KeePass Password Safe before 2.13 allows local users to gain privileges via a Trojan horse DwmApi.dll file in the current working directory, as demonstrated by a directory that contains a .kdbx file. NOTE: some of these details are obtained from third party information.

Affected (2)

Products: Keepass: Password Safe

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Keepass Password Safe	Up to 2.10
Keepass Password Safe	Version 1.6

References (6)

http://secunia.com/advisories/41167

Source: cve@mitre.org

Vendor Advisory

http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/

Source: cve@mitre.org

http://www.keepass.info/news/n100906_2.13.html

Source: cve@mitre.org

http://secunia.com/advisories/41167

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.keepass.info/news/n100906_2.13.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.