CVE-2011-1975

CVE-2011-1975 describes an untrusted search path vulnerability in the Data Access Tracing component of Microsoft Windows Data Access Components (DAC) 6.0, affecting Windows 7 and Windows Server 2008 R2. This flaw allows a local attacker to gain elevated privileges by placing a malicious DLL in a directory that will be searched by the vulnerable component, such as one containing an Excel .xlsx file. The vulnerability has a critical CVSS score of 9.3, indicating high impact on confidentiality, integrity, and availability, with a network attack vector and medium attack complexity. Despite its severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.