Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Untrusted search path vulnerability in the Indeo Codec in iac25_32.ax in Microsoft Windows XP SP3 allows local users to gain privileges via a Trojan horse iacenc.dll file in the current working directory, as demonstrated by access through BS.Player or Media Player Classic to a directory that contains a .avi, .mka, .ra, or .ram file, aka "Indeo Codec Insecure Library Loading Vulnerability." NOTE: some of these details are obtained from third party information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Windows Indeo filter 'iac25_32.ax'非信任搜索路径漏洞
Vulnerability Description
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。 在BS.Player，Media Player Classic和其他产品中使用的Microsoft Windows中的Indeo filter (iac25_32.ax)中存在非信任搜索路径漏洞。本地用户和远程攻击者可以借助与AVI，.mka，.ra，.ram文件在同一文件夹下的iacenc.dll木马执行任意代码和DLL劫持攻击。
CVSS Information
N/A
Vulnerability Type
N/A