CVE:CVE-2010-5224
CNNVD:CNNVD-201209-064
Cool iPhone Ringtone Maker 2.2.3版本中存在不可信搜索路径漏洞。本地攻击者可利用该漏洞通过当前目录（如包含.mp3文件的目录）下的Trojan木马dwmapi.dll文件，获取特权。
solution:Upgrade coolrecordedit cool_iphone_ringtone_maker to a higher version than 2.2.3,and avoid the version 2.2.3