CVE-2010-5237: Untrusted search path vulnerability in CyberLink PowerDirector 7 allows local users to gain privileges via...

Security readout for executives and security teams

CVE-2010-5237 is a legacy local privilege-risk issue in CyberLink PowerDirector 7. If the application opens certain project or image-related files from a directory controlled by a local user, Windows DLL search behavior may cause an untrusted DLL to load. The source bundle provides no CVSS score, patch status, or active exploitation evidence. Exposure is likely limited to endpoints running CyberLink PowerDirector 7, especially where users open relevant file types from shared, downloaded, removable, or otherwise writable directories. The bundle does not identify server exposure or broader CyberLink product impact. Treat this as a targeted legacy endpoint hygiene issue, not an internet-scale emergency. Prioritize removal or upgrade if PowerDirector 7 exists on business systems, especially shared workstations or environments handling files from external parties. Mitigation focus: Inventory endpoints for CyberLink PowerDirector 7 installations.; Check CyberLink or Secunia guidance for fixed versions or vendor workarounds.; Remove PowerDirector 7 where no business requirement remains..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.