CVE-2010-5264

Published: Sep 7, 2012Modified: Apr 29, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

Untrusted search path vulnerability in the CExtDWM::CExtDWM method in ProfUIS290m.dll and ProfUIS290m-RDE.dll in Prof-UIS before 2.9.1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory. NOTE: some of these details are obtained from third party information.

Affected (1)

Products: Prof Uis: Prof Uis

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Prof Uis Prof Uis	version ≤ 2.9.0

References (6)

http://packetstormsecurity.org/1009-exploits/yloader-dllhijack.txt

Source: cve@mitre.org

http://secunia.com/advisories/41578

Source: cve@mitre.org

Vendor Advisory

http://www.prof-uis.com/prof-uis/version-history/version-291.aspx

Source: cve@mitre.org

Vendor Advisory

http://packetstormsecurity.org/1009-exploits/yloader-dllhijack.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/41578

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.prof-uis.com/prof-uis/version-history/version-291.aspx

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.