CVE

Id
45708  
CVE No.
CVE-2010-3124  
Status
Candidate  
Description
Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll that is located in the same folder as a .mp3 file.  
Phase
Assigned (20100825)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
497649 45708 CVE-2010-3124 EXPLOIT-DB:14750  View
497650 45708 CVE-2010-3124 URL:http://www.exploit-db.com/exploits/14750  View
497651 45708 CVE-2010-3124 MLIST:[oss-security] 20100825 CVE request: VLC media player - DLL preloading vulnerability  View
497652 45708 CVE-2010-3124 URL:http://www.openwall.com/lists/oss-security/2010/08/25/9  View
497653 45708 CVE-2010-3124 MLIST:[oss-security] 20100825 Re: CVE request: VLC media player - DLL preloading vulnerability  View
497654 45708 CVE-2010-3124 URL:http://www.openwall.com/lists/oss-security/2010/08/25/10  View
497655 45708 CVE-2010-3124 CONFIRM:http://git.videolan.org/?p=vlc/vlc-1.1.git;a=blobdiff;f=bin/winvlc.c;h=ac9b97ca9f5f9ba001f13bf61eb5127a1c1dbcbf;hp=2d09cba320e3b0def7069ce1ebab25d1340161c5;hb=43a31df56c37bd62c691cdbe3c1f11babd164b56;hpb=2d366da738b19f8d761d7084746c6db6f52808c6  View
497656 45708 CVE-2010-3124 OVAL:oval:org.mitre.oval:def:12190  View
497657 45708 CVE-2010-3124 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12190  View
497658 45708 CVE-2010-3124 SECUNIA:41107  View
497659 45708 CVE-2010-3124 URL:http://secunia.com/advisories/41107  View
497660 45708 CVE-2010-3124 VUPEN:ADV-2010-2172  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39852 JVNDB-2010-005637 TeamViewer における任意のコードを実行される脆弱性 TeamViewer は、検索パスに関する処理に不備があるため、任意のコードを実行される、および DLL ハイジャック攻撃を実行される脆弱性が存在します。 CVE-2010-3128 45708 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005637.html  View