CVE

Id
45713  
CVE No.
CVE-2010-3129  
Status
Candidate  
Description
Untrusted search path vulnerability in uTorrent 2.0.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse plugin_dll.dll, userenv.dll, shfolder.dll, dnsapi.dll, dwmapi.dll, iphlpapi.dll, dhcpcsvc.dll, dhcpcsvc6.dll, or rpcrtremote.dll that is located in the same folder as a .torrent or .btsearch file.  
Phase
Assigned (20100826)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
497686 45713 CVE-2010-3129 EXPLOIT-DB:14726  View
497687 45713 CVE-2010-3129 URL:http://www.exploit-db.com/exploits/14726  View
497688 45713 CVE-2010-3129 EXPLOIT-DB:14748  View
497689 45713 CVE-2010-3129 URL:http://www.exploit-db.com/exploits/14748  View
497690 45713 CVE-2010-3129 OVAL:oval:org.mitre.oval:def:6887  View
497691 45713 CVE-2010-3129 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6887  View
497692 45713 CVE-2010-3129 SECUNIA:41051  View
497693 45713 CVE-2010-3129 URL:http://secunia.com/advisories/41051  View
497694 45713 CVE-2010-3129 VUPEN:ADV-2010-2164  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39855 JVNDB-2010-005640 Wireshark における任意のコードを実行される脆弱性 Wireshark は、検索パスに関する処理に不備があるため、任意のコードを実行される、および DLL ハイジャック攻撃を実行される脆弱性が存在します。 CVE-2010-3133 45713 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005640.html  View