CVE-2007-6753

2012-03-2819:00:00

mitre

www.cve.org

6.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.8%

JSON

Untrusted search path vulnerability in Shell32.dll in Microsoft Windows 2000, Windows XP, Windows Vista, Windows Server 2008, and Windows 7, when using an environment configured with a string such as %APPDATA% or %PROGRAMFILES% in a certain way, allows local users to gain privileges via a Trojan horse DLL under the current working directory, as demonstrated by iTunes and Safari.