Description
Untrusted search path vulnerability in UltraVNC 1.0.8.2 allows local users to gain privileges via a Trojan horse vnclang.dll file in the current working directory, as demonstrated by a directory that contains a .vnc file. NOTE: some of these details are obtained from third party information.
References
- http://web.archive.org/web/20100924002712/http://www.uvnc.com/download/
- 41208 third-party-advisory