Untrusted Search Path Vulnerability in UltraISO by EZB Systems

CVE-2010-5255

What is CVE-2010-5255?

The vulnerability in UltraISO version 9.3.6.2750 arises from an untrusted search path, which permits local users to execute malicious code by placing a crafted 'daemon.dll' file in the current working directory. If a user opens a directory containing a malicious .iso file, the application may inadvertently load the harmful DLL, allowing attackers to gain elevated privileges. This security flaw highlights the need for stringent code execution policies and user awareness to mitigate potential exploitation.

References