Lucene search

MitreCVE-2010-3140

HistoryAug 27, 2010 - 7:00 p.m.

CVE-2010-3140

2010-08-2719:00:01

mitre

web.nvd.nist.gov

cve-2010-3140

windows xp

vulnerability

dll hijacking

schannel.dll

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

High

EPSS

0.056

Percentile

93.3%

JSON

Untrusted search path vulnerability in Microsoft Windows Internet Communication Settings on Windows XP SP3 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse schannel.dll that is located in the same folder as an ISP file.

Affected configurations

Nvd

Node

microsoftwindows_xpsp3

VendorProductVersionCPE
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_xp	*	cpe:2.3:o:microsoft:windows_xp::sp3::::::*

References

www.exploit-db.com/exploits/14780

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6743

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

High

EPSS

0.056

Percentile

93.3%

JSON

Related for CVE-2010-3140