CVE

Id
45723  
CVE No.
CVE-2010-3139  
Status
Candidate  
Description
Untrusted search path vulnerability in Microsoft Windows Progman Group Converter (grpconv.exe) allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse imm.dll that is located in the same folder as a .grp file.  
Phase
Assigned (20100827)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
497774 45723 CVE-2010-3139 EXPLOIT-DB:14758  View
497775 45723 CVE-2010-3139 URL:http://www.exploit-db.com/exploits/14758  View
497776 45723 CVE-2010-3139 OSVDB:67535  View
497777 45723 CVE-2010-3139 URL:http://osvdb.org/67535  View
497778 45723 CVE-2010-3139 OVAL:oval:org.mitre.oval:def:12209  View
497779 45723 CVE-2010-3139 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12209  View
497780 45723 CVE-2010-3139 SECUNIA:41136  View
497781 45723 CVE-2010-3139 URL:http://secunia.com/advisories/41136  View
497782 45723 CVE-2010-3139 VUPEN:ADV-2010-2200  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39227 JVNDB-2010-005012 Microsoft Windows Contacts における DLL のハイジャック攻撃を実行される脆弱性 Microsoft Windows Contacts には、検索パスに関する処理に不備があるため、任意のコードを実行される、および DLL のハイジャック攻撃を実行される脆弱性が存在します。 CVE-2010-3143 45723 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005012.html  View