CVE-2010-5220

Name of the Vulnerable Software and Affected Versions MEO Encryption Software version 2.02

Description The issue allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory. This can be demonstrated by a directory that contains a .meo or .cry file.

Recommendations For MEO Encryption Software version 2.02, consider restricting access to the current working directory to prevent exploitation. As a temporary workaround, avoid using directories that contain .meo or .cry files until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.