CVE-2010-3138

🗓️ 27 Aug 2010 18:10:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 129 Views

CVE-2010-3138 Indeo Codec untrusted search path vulnerability in Windows XP SP

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2010-3138	25 Aug 201000:00	–	circl
Check Point Advisories	Microsoft Windows Indeo Codec Insecure Library Loading (MS12-014; CVE-2010-3138)	14 Feb 201200:00	–	checkpoint_advisories
Cvelist	CVE-2010-3138	27 Aug 201018:10	–	cvelist
NVD	CVE-2010-3138	27 Aug 201019:00	–	nvd
OpenVAS	Microsoft Windows Indeo Codec Remote Code Execution Vulnerability (2661637)	15 Feb 201200:00	–	openvas
OpenVAS	MS Windows Indeo Codec Remote Code Execution Vulnerability (2661637)	15 Feb 201200:00	–	openvas
Prion	Design/Logic Flaw	27 Aug 201019:00	–	prion
securityvulns	Microsoft Windows multiple security vulnerabilities	10 Mar 201200:00	–	securityvulns
Tenable Nessus	MS12-014: Vulnerability in Indeo Codec Could Allow Remote Code Execution (2661637)	14 Feb 201200:00	–	nessus
Zero Science Lab	Media Player Classic 6.4.9.1 (iacenc.dll) DLL Hijacking Exploit	26 Aug 201000:00	–	zeroscience

NVD

Node

microsoft windows_media_player

AND

microsoft windows_xpsp3

Node

bsplayer bs.player

Source	Link
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-014
exploit-db	www.exploit-db.com/exploits/14765
osvdb	www.osvdb.org/67588
us-cert	www.us-cert.gov/cas/techalerts/TA12-045A.html
exploit-db	www.exploit-db.com/exploits/14788
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7132
secunia	www.secunia.com/advisories/41114
zeroscience	www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4956.php
vupen	www.vupen.com/english/advisories/2010/2190

29 Apr 2026 01:13Current

6.5Medium risk

Vulners AI Score6.5

CVSS 29.3

EPSS0.43265

cve-2010-3138 indeo codec untrusted search path vulnerability windows xp sp3 privilege escalation iac25_32.ax iacenc.dll security vulnerability nvd microsoft bs.player media player classic