CVE-2010-3148 Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse mfc71enu.dll file in the current working directory, as demonstrated by a direct...
HighCVSS 9.3
EPSS 13.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .vsd, .vdx, .vst, or .vtx file, aka "Microsoft Visio Insecure Library Loading Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft visio | = 2003 | No fix listed |
References
- 14744 exploit
- TA11-193A third-party-advisory us-government-resource
- ADV-2010-2192 vdb-entry
- MS11-055 vendor-advisory
- oval:org.mitre.oval:def:7122 signature vdb-entry