Untrusted search path vulnerability in Microsoft Windows Progman Group ConverterDeprecated |
ID: oval:org.mitre.oval:def:12209 | Date: (C)2010-10-22 (M)2022-10-10 |
Class: VULNERABILITY | Family: windows |
Untrusted search path vulnerability in Microsoft Windows Progman Group Converter (grpconv.exe) allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse imm.dll that is located in the same folder as a .grp file.
Platform: |
Microsoft Windows 2000 |
Microsoft Windows Server 2003 |
Microsoft Windows XP |