CVE-2010-5216

CVE-2010-5216 describes an untrusted search path vulnerability in LINGO versions 11.0.1.6 and 12.0.2.20. This flaw allows a local attacker to achieve privilege escalation by placing a malicious myuser.dll file in the current working directory, which LINGO then loads. With a CVSS score of 6.9, this vulnerability has a local attack vector and medium attack complexity, potentially leading to complete compromise of confidentiality, integrity, and availability. There is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.