CVE-2010-3147

🗓️ 27 Aug 2010 18:10:00Reported by mitreType

Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a Trojan horse wab32res.dll file in the current working directory, as demonstrated by a directory that contains a Windows Address Book (WAB), VCF (aka vCard), or P7C file, aka "Insecure Library Loading Vulnerability.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2010-3147	25 Aug 201000:00	–	circl
Check Point Advisories	Microsoft Windows Address Book Insecure Library Loading (MS10-096; CVE-2010-3147)	14 Dec 201000:00	–	checkpoint_advisories
Cvelist	CVE-2010-3147	27 Aug 201018:10	–	cvelist
NVD	CVE-2010-3147	27 Aug 201019:00	–	nvd
OpenVAS	Microsoft Windows Address Book Remote Code Execution Vulnerability (2423089)	15 Dec 201000:00	–	openvas
OpenVAS	Microsoft Windows Address Book Remote Code Execution Vulnerability (2423089)	15 Dec 201000:00	–	openvas
Prion	Design/Logic Flaw	27 Aug 201019:00	–	prion
Prion	Design/Logic Flaw	27 Aug 201019:00	–	prion
Positive Technologies	PT-2010-4592 · Microsoft · Windows Server 2003 +6	27 Aug 201000:00	–	ptsecurity
securityvulns	ASPR #2010-12-14-1: Remote Binary Planting in Windows Address Book	15 Dec 201000:00	–	securityvulns

NVD

Node

microsoft outlook_expressMatch6.00.2900.5512

AND

microsoft windows_2003_serversp2

microsoft windows_2003_serversp2itanium

microsoft windows_7

microsoft windows_7Match-

microsoft windows_server_2003sp2

microsoft windows_server_2008itanium

microsoft windows_server_2008x32

microsoft windows_server_2008x64

microsoft windows_server_2008r2itanium

microsoft windows_server_2008r2x64

microsoft windows_server_2008sp2x32

microsoft windows_server_2008sp2x64

microsoft windows_server_2008Match-sp2itanium

microsoft windows_vistasp1

microsoft windows_vistasp2

microsoft windows_vistaMatch-sp1

microsoft windows_xpsp3

microsoft windows_xpMatch-sp2x64

Source	Link
secunia	www.secunia.com/advisories/41050
exploit-db	www.exploit-db.com/exploits/14745/
securitytracker	www.securitytracker.com/id
us-cert	www.us-cert.gov/cas/techalerts/TA10-348A.html
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12352
attackvector	www.attackvector.org/new-dll-hijacking-exploits-many/
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-096

29 Apr 2026 01:13Current

6.3Medium risk

Vulners AI Score6.3

CVSS 29.3

EPSS0.25085