Description
Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
References
- http://www7a.biglobe.ne.jp/~schezo/dll_vul.html
- JVNDB-2010-000037 third-party-advisory
- JVN#82752978 third-party-advisory
- 41742 third-party-advisory
- http://www.ipa.go.jp/about/press/20101012.html