CVE-2010-5272

CVE-2010-5272 is an untrusted search path vulnerability affecting Altova DatabaseSpy 2011 Enterprise Edition SP1. A local attacker can exploit this by placing a malicious dwmapi.dll file in the same directory as a .qprj file, leading to privilege escalation. With a CVSS score of 6.9, this vulnerability has a local attack vector and medium attack complexity, potentially resulting in complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage for this CVE.