Skip to content
OpenAdvisories
Unscored CVE-2012-0009 EUVD-2012-0050GHSA-27p8-g8h7-jj37

Untrusted search path vulnerability in the Windows Object Packager configuration in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 al…

Published Jan 10, 2012 · Updated Aug 6, 2024 · Assigned by microsoft

Description

Untrusted search path vulnerability in the Windows Object Packager configuration in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse executable file in the current working directory, as demonstrated by a directory that contains a file with an embedded packaged object, aka "Object Packager Insecure Executable Launching Vulnerability."

References