CVE-2010-3146

🗓️ 27 Aug 2010 18:10:00Reported by mitreType

CVE-2010-3146 Multiple untrusted search path vulnerabilities in Microsoft Groove 2007 SP2 allow local users to gain privileges via a Trojan horse (1) mso.dll or (2) GroovePerfmon.dll file in the current working directory, as demonstrated by a directory that contains a Groove vCard (.vcg) or Groove Tool Archive (.gta) file, aka "Microsoft Groove Insecure Library Loading Vulnerability.

Reporter	Title	Published	Views	Family All 13
Check Point Advisories	Microsoft Groove 2007 mso.dll Insecure Library Loading (MS11-016; CVE-2010-3146)	8 Mar 201100:00	–	checkpoint_advisories
Cvelist	CVE-2010-3146	27 Aug 201018:10	–	cvelist
NVD	CVE-2010-3146	27 Aug 201019:00	–	nvd
OpenVAS	Microsoft Office Products Insecure Library Loading Vulnerability	9 Sep 201500:00	–	openvas
OpenVAS	Microsoft Groove Remote Code Execution Vulnerability (2494047)	9 Mar 201100:00	–	openvas
OpenVAS	Microsoft Groove Remote Code Execution Vulnerability (2494047)	9 Mar 201100:00	–	openvas
Prion	Design/Logic Flaw	27 Aug 201019:00	–	prion
Saint	Microsoft Office Groove Insecure Library Loading	28 Mar 201100:00	–	saint
Saint	Microsoft Office Groove Insecure Library Loading	28 Mar 201100:00	–	saint
Saint	Microsoft Office Groove Insecure Library Loading	28 Mar 201100:00	–	saint

NVD

Node

microsoft grooveMatch2007sp2

Source	Link
us-cert	www.us-cert.gov/cas/techalerts/TA11-067A.html
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12632
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-016
vupen	www.vupen.com/english/advisories/2010/2188
exploit-db	www.exploit-db.com/exploits/14746/

29 Apr 2026 01:13Current

6.5Medium risk

Vulners AI Score6.5

CVSS 29.3

EPSS0.28594