CVE

Id
45774  
CVE No.
CVE-2010-3190  
Status
Candidate  
Description
Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; and Visual C++ 2005 SP1, 2008 SP1, and 2010 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory during execution of an MFC application such as AtlTraceTool8.exe (aka ATL MFC Trace Tool), as demonstrated by a directory that contains a TRC, cur, rs, rct, or res file, aka "MFC Insecure Library Loading Vulnerability."  
Phase
Assigned (20100831)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
498447 45774 CVE-2010-3190 MISC:http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/  View
498448 45774 CVE-2010-3190 CONFIRM:https://support.apple.com/HT205221  View
498449 45774 CVE-2010-3190 APPLE:APPLE-SA-2015-09-16-3  View
498450 45774 CVE-2010-3190 URL:http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.html  View
498451 45774 CVE-2010-3190 MS:MS11-025  View
498452 45774 CVE-2010-3190 URL:http://www.microsoft.com/technet/security/Bulletin/MS11-025.mspx  View
498453 45774 CVE-2010-3190 CERT:TA11-102A  View
498454 45774 CVE-2010-3190 URL:http://www.us-cert.gov/cas/techalerts/TA11-102A.html  View
498455 45774 CVE-2010-3190 BID:42811  View
498456 45774 CVE-2010-3190 URL:http://www.securityfocus.com/bid/42811  View
498457 45774 CVE-2010-3190 OVAL:oval:org.mitre.oval:def:12457  View
498458 45774 CVE-2010-3190 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12457  View
498459 45774 CVE-2010-3190 SECUNIA:41212  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36246 JVNDB-2010-002026 IBM DB2 の DB2DART プログラムにおけるアクセス制限を回避される脆弱性 IBM DB2 の DB2DART プログラムには、インスタンス所有者が所有するファイルを上書きしてしまう不備があるため、アクセス制限を回避される脆弱性が存在します。 CVE-2010-3194 45774 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002026.html  View