CVE-2010-3199

Untrusted search path vulnerability in TortoiseSVN 1.6.10, Build 19898 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Tortoise. NOTE: this is only a vulnerability when a file extension is associated with TortoiseProc or TortoiseMerge, which is not the default.

• tigris tortoisesvn (<= 1.6.10) • tigris tortoisesvn 0.1 • tigris tortoisesvn 0.2 • tigris tortoisesvn 0.3 • tigris tortoisesvn 0.4 • tigris tortoisesvn 0.5 • tigris tortoisesvn 0.5.1 • tigris tortoisesvn 0.6 • tigris tortoisesvn 0.6.1 • tigris tortoisesvn 0.7 • tigris tortoisesvn 0.8 • tigris tortoisesvn 0.8.1 • tigris tortoisesvn 0.9.1 • tigris tortoisesvn 0.9.2 • tigris tortoisesvn 0.10.0 • tigris tortoisesvn 0.11.0 • tigris tortoisesvn 0.11.2 • tigris tortoisesvn 0.12 • tigris tortoisesvn 0.12.1 • tigris tortoisesvn 0.14 • tigris tortoisesvn 0.15 • tigris tortoisesvn 0.15.1 • tigris tortoisesvn 0.15.2 • tigris tortoisesvn 0.16 • tigris tortoisesvn 0.17 • tigris tortoisesvn 0.18 • tigris tortoisesvn 0.19 • tigris tortoisesvn 0.20 • tigris tortoisesvn 0.20.1 • tigris tortoisesvn 0.20.2 • tigris tortoisesvn 0.21 • tigris tortoisesvn 0.22 • tigris tortoisesvn 0.23 • tigris tortoisesvn 0.24 • tigris tortoisesvn 0.25 • tigris tortoisesvn 0.26 • tigris tortoisesvn 1.0 • tigris tortoisesvn 1.0.1 • tigris tortoisesvn 1.0.2 • tigris tortoisesvn 1.0.3 • tigris tortoisesvn 1.0.4 • tigris tortoisesvn 1.0.5 • tigris tortoisesvn 1.0.6 • tigris tortoisesvn 1.0.7 • tigris tortoisesvn 1.0.8 • tigris tortoisesvn 1.1.0 • tigris tortoisesvn 1.1.1 • tigris tortoisesvn 1.1.2 • tigris tortoisesvn 1.1.3 • tigris tortoisesvn 1.1.4 • tigris tortoisesvn 1.1.5 • tigris tortoisesvn 1.1.6 • tigris tortoisesvn 1.1.7 • tigris tortoisesvn 1.2.0 • tigris tortoisesvn 1.2.1 • tigris tortoisesvn 1.2.2 • tigris tortoisesvn 1.2.3 • tigris tortoisesvn 1.2.4 • tigris tortoisesvn 1.2.5 • tigris tortoisesvn 1.2.6 … and 31 more