CVE-2011-0032

CVE-2011-0032 is an untrusted search path vulnerability in Microsoft DirectShow, affecting Windows Vista, Windows 7, and Windows Server 2008 R2. This flaw allows a local attacker to gain elevated privileges by placing a malicious DLL in the same directory as specific media files, which DirectShow then insecurely loads. With a CVSS score of 9.3, this vulnerability is considered critical due to its network attack vector, medium complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.