CVE-2010-3140 Untrusted search path vulnerability in Microsoft Windows Internet Communication Settings on Windows XP SP3 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL....
HighCVSS 9.3
EPSS 15.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Untrusted search path vulnerability in Microsoft Windows Internet Communication Settings on Windows XP SP3 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse schannel.dll that is located in the same folder as an ISP file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows xp | All versions | No fix listed |
References
- 14780 exploit
- oval:org.mitre.oval:def:6743 signature vdb-entry