CVE

Id
45722  
CVE No.
CVE-2010-3138  
Status
Candidate  
Description
Untrusted search path vulnerability in the Indeo Codec in iac25_32.ax in Microsoft Windows XP SP3 allows local users to gain privileges via a Trojan horse iacenc.dll file in the current working directory, as demonstrated by access through BS.Player or Media Player Classic to a directory that contains a .avi, .mka, .ra, or .ram file, aka "Indeo Codec Insecure Library Loading Vulnerability." NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20100827)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
497758 45722 CVE-2010-3138 EXPLOIT-DB:14765  View
497759 45722 CVE-2010-3138 URL:http://www.exploit-db.com/exploits/14765  View
497760 45722 CVE-2010-3138 EXPLOIT-DB:14788  View
497761 45722 CVE-2010-3138 URL:http://www.exploit-db.com/exploits/14788  View
497762 45722 CVE-2010-3138 MISC:http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4956.php  View
497763 45722 CVE-2010-3138 MS:MS12-014  View
497764 45722 CVE-2010-3138 URL:http://technet.microsoft.com/security/bulletin/MS12-014  View
497765 45722 CVE-2010-3138 CERT:TA12-045A  View
497766 45722 CVE-2010-3138 URL:http://www.us-cert.gov/cas/techalerts/TA12-045A.html  View
497767 45722 CVE-2010-3138 OSVDB:67588  View
497768 45722 CVE-2010-3138 URL:http://osvdb.org/67588  View
497769 45722 CVE-2010-3138 OVAL:oval:org.mitre.oval:def:7132  View
497770 45722 CVE-2010-3138 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7132  View
497771 45722 CVE-2010-3138 SECUNIA:41114  View
497772 45722 CVE-2010-3138 URL:http://secunia.com/advisories/41114  View
497773 45722 CVE-2010-3138 VUPEN:ADV-2010-2190  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39226 JVNDB-2010-005011 Microsoft Office PowerPoint 2007 における DLL ハイジャック攻撃を実行される脆弱性 Microsoft Office PowerPoint 2007 は、検索パスに関する処理に不備があるため、任意のコードを実行される、および DLL ハイジャック攻撃を実行される脆弱性が存在します。 CVE-2010-3142 45722 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005011.html  View