Untrusted search path vulnerability in Archive Decoder 1.23 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Archive_decoder | Ponsoftware | * | 1.23 (including) |
| Archive_decoder | Ponsoftware | 1.00 (including) | 1.00 (including) |
| Archive_decoder | Ponsoftware | 1.01 (including) | 1.01 (including) |
| Archive_decoder | Ponsoftware | 1.02 (including) | 1.02 (including) |
| Archive_decoder | Ponsoftware | 1.03 (including) | 1.03 (including) |
| Archive_decoder | Ponsoftware | 1.04 (including) | 1.04 (including) |
| Archive_decoder | Ponsoftware | 1.05 (including) | 1.05 (including) |
| Archive_decoder | Ponsoftware | 1.06 (including) | 1.06 (including) |
| Archive_decoder | Ponsoftware | 1.07 (including) | 1.07 (including) |
| Archive_decoder | Ponsoftware | 1.08 (including) | 1.08 (including) |
| Archive_decoder | Ponsoftware | 1.09 (including) | 1.09 (including) |
| Archive_decoder | Ponsoftware | 1.11 (including) | 1.11 (including) |
| Archive_decoder | Ponsoftware | 1.12 (including) | 1.12 (including) |
| Archive_decoder | Ponsoftware | 1.13 (including) | 1.13 (including) |
| Archive_decoder | Ponsoftware | 1.20 (including) | 1.20 (including) |
| Archive_decoder | Ponsoftware | 1.21 (including) | 1.21 (including) |
| Archive_decoder | Ponsoftware | 1.22 (including) | 1.22 (including) |