CVE-2010-5244

CVE-2010-5244 describes an untrusted search path vulnerability in SiSoftware Sandra 2010 Lite 2010.7.16.52. This flaw allows a local attacker to achieve privilege escalation by placing a malicious dwmapi.dll file in the same directory as a .sis file, which the application then loads. With a CVSS score of 6.9, this vulnerability has a local attack vector, medium attack complexity, and high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.