Lucene search
HistoryAug 27, 2010 - 7:00 p.m.
CVE-2010-3139
cve-2010-3139
microsoft windows
grpconv.exe
vulnerability
dll hijacking
imm.dll
nvd
7.6 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.147 Low
EPSS
Percentile
95.8%
Untrusted search path vulnerability in Microsoft Windows Progman Group Converter (grpconv.exe) allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse imm.dll that is located in the same folder as a .grp file.
Affected configurations
Node
microsoftwindows
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:windows | microsoft windows | eq | * |
Related
openvas
openvas
nvd
nvd
CVE-2010-3139
2010-08-27 19:00:01
cvelist
cvelist
CVE-2010-3139
2010-08-27 18:10:00
prion
prion
Design/Logic Flaw
2010-08-27 19:00:00
7.6 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.147 Low
EPSS
Percentile
95.8%
Related for CVE-2010-3139