9.3

CVE-2010-3139

Exploit

EPSS 17.05%
Veröffentlicht 27.08.2010 19:00:01
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Untrusted search path vulnerability in Microsoft Windows Progman Group Converter (grpconv.exe) allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse imm.dll that is located in the same folder as a .grp file.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Windows

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	17.05%	0.947

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://osvdb.org/67535

http://secunia.com/advisories/41136

Vendor Advisory

http://www.exploit-db.com/exploits/14758

Exploit

http://www.vupen.com/english/advisories/2010/2200

Vendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12209

https://nvd.nist.gov/vuln/detail/CVE-2010-3139

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-3139

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-3139

EUVD