Lucene search

K
cve[email protected]CVE-2010-3148
HistoryAug 27, 2010 - 7:00 p.m.

CVE-2010-3148

2010-08-2719:00:00
NVD-CWE-Other
web.nvd.nist.gov
28
cve-2010-3148
microsoft visio
untrusted search path
vulnerability
privilege escalation
nvd

6.3 Medium

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.792 High

EPSS

Percentile

98.3%

Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .vsd, .vdx, .vst, or .vtx file, aka β€œMicrosoft Visio Insecure Library Loading Vulnerability.”

CPENameOperatorVersion
microsoft:visiomicrosoft visioeq2003

6.3 Medium

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.792 High

EPSS

Percentile

98.3%