CVE-2010-3147

28Vexday Risk Score

Sem sinal de exploração. Ela tem prova de conceito pública.

ssvc Attendepss 19%

da publicação à arma0 dias

Publicada no NVD27 de ago.

1ª PoC24 de ago.

probabilidade de exploração

19%top 3% das CVEs

exploração observada

nãonenhuma fonte reporta

4 exploit(s) público(s)

Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a Trojan horse wab32res.dll file in the current working directory, as demonstrated by a directory that contains a Windows Address Book (WAB), VCF (aka vCard), or P7C file, aka "Insecure Library Loading Vulnerability." NOTE: the codebase for this product may overlap the codebase for the product referenced in CVE-2010-3143.

Produtos afetados

n/a · n/a

PoCs públicas encontradas — 4✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/14745 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/14778 exploitdbwww.exploit-db.com/exploits/14733não verificado cve_referencewww.exploit-db.com/exploits/14745/não verificado

⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.

Referências

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-096 http://secunia.com/advisories/41050 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12352 http://www.attackvector.org/new-dll-hijacking-exploits-many/http://www.exploit-db.com/exploits/14745/http://www.securitytracker.com/id?1024878 http://www.us-cert.gov/cas/techalerts/TA10-348A.html