Untrusted Search Path Vulnerability in Microsoft Windows Movie Maker

CVE-2010-3967

Summary

The untrusted search path vulnerability in Microsoft Windows Movie Maker 2.6 allows local users to execute Trojan horse DLLs located within the current working directory. This can lead to unauthorized privilege escalation when a crafted Movie Maker project file (MSWMM) is accessed, enabling an attacker to execute malicious code. Users should ensure that they handle files securely and implement proper security measures to prevent exploitation of this vulnerability.

References