Untrusted search path vulnerability in TechSmith Snagit all versions 10.x and 11.x allows local users and possibly remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a snag snagcc or snagprof file.