Untrusted Search Path Vulnerability in Microsoft Windows Products

CVE-2014-0315

Summary

This vulnerability in Microsoft Windows allows local users to exploit a flaw in the file handling mechanism, specifically through placing a malicious cmd.exe file in the current working directory. When the system executes commands, it may inadvertently launch the manipulated cmd.exe, enabling unauthorized actions and privilege escalation. The issue is present across multiple Windows versions, creating a potential risk for systems still operating on these platforms.

References