VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 11, 2015· Updated Jun 17, 2026

CVE-2015-0096

CVE-2015-0096

Description

Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, leading to DLL loading during Windows Explorer access to the icon of a crafted shortcut, aka "DLL Planting Remote Code Execution Vulnerability."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

20
  • Microsoft/Windows 72 versions
    cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
    • (no CPE)range: SP1
  • Microsoft/Windows 82 versions
    cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:*:*
    • (no CPE)
  • Microsoft/Windows 8.12 versions
    cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
    • (no CPE)
  • Microsoft/Windows Rt 8.13 versions
    cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*
    • (no CPE)range: Gold, 8.1
  • Microsoft/Windows Server 20032 versions
    cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*
    • (no CPE)range: SP2
  • Microsoft/Windows Server 20084 versions
    cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*+ 3 more
    • cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*
    • cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
    • (no CPE)range: SP2, R2 SP1
  • Microsoft/Windows Server 20123 versions
    cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
    • (no CPE)range: Gold, R2
  • Microsoft/Windows
    cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*
  • Microsoft/Windows Vistallm-fuzzy
    Range: SP2

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.