CVE-2010-5196 Information

Description

Untrusted search path vulnerability in KeePass Password Safe before 2.13 allows local users to gain privileges via a Trojan horse DwmApi.dll file in the current working directory as demonstrated by a directory that contains a .kdbx file. NOTE: some of these details are obtained from third party information.

Reference

http://secunia.com/advisories/41167 http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/ http://www.keepass.info/news/n100906_2.13.html