CVE

Id
45729  
CVE No.
CVE-2010-3145  
Status
Candidate  
Description
Untrusted search path vulnerability in the BitLocker Drive Encryption API, as used in sdclt.exe in Backup Manager in Microsoft Windows Vista SP1 and SP2, allows local users to gain privileges via a Trojan horse fveapi.dll file in the current working directory, as demonstrated by a directory that contains a Windows Backup Catalog (.wbcat) file, aka "Backup Manager Insecure Library Loading Vulnerability."  
Phase
Assigned (20100827)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
497804 45729 CVE-2010-3145 EXPLOIT-DB:14751  View
497805 45729 CVE-2010-3145 URL:http://www.exploit-db.com/exploits/14751/  View
497806 45729 CVE-2010-3145 MS:MS11-001  View
497807 45729 CVE-2010-3145 URL:http://www.microsoft.com/technet/security/Bulletin/MS11-001.mspx  View
497808 45729 CVE-2010-3145 CERT:TA11-011A  View
497809 45729 CVE-2010-3145 URL:http://www.us-cert.gov/cas/techalerts/TA11-011A.html  View
497810 45729 CVE-2010-3145 OVAL:oval:org.mitre.oval:def:12273  View
497811 45729 CVE-2010-3145 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12273  View
497812 45729 CVE-2010-3145 SECTRACK:1024948  View
497813 45729 CVE-2010-3145 URL:http://www.securitytracker.com/id?1024948  View
497814 45729 CVE-2010-3145 VUPEN:ADV-2011-0074  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38489 JVNDB-2010-004274 Adobe Device Central CS5 における任意のコードを実行される脆弱性 Adobe Device Central CS5 には、検索パスに関する処理に不備があるため、任意のコードを実行される、および DLL ハイジャック攻撃を実行される脆弱性が存在します。 CVE-2010-3149 45729 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004274.html  View