CVE-2010-5253

CVE-2010-5253 describes an untrusted search path vulnerability in WinImage 8.50, allowing local users to elevate privileges. An attacker could place a malicious wnaspi32.dll file in the same directory as a .imz file, which WinImage would then load and execute. With a CVSS score of 6.9, this vulnerability has high impact on confidentiality, integrity, and availability, but requires local access and medium attack complexity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this decade-old vulnerability.