CVE-2010-5198

CVE-2010-5198 describes multiple untrusted search path vulnerabilities in Intuit QuickBooks 2010. A local attacker could exploit this by placing a malicious DLL file (dbicudtx11.dll, mfc90enu.dll, or mfc90loc.dll) in a directory containing specific QuickBooks file types, leading to privilege escalation. With a CVSS score of 6.9, this vulnerability is considered medium severity due to its local attack vector and medium attack complexity, but it carries high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.