Lucene search

[email protected]CVE-2010-3914

HistoryOct 03, 2022 - 4:20 p.m.

CVE-2010-3914

2022-10-0316:20:57

[email protected]

web.nvd.nist.gov

vim

gvim

vulnerability

code execution

dll hijacking

cve-2010-3914

nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.3%

JSON

Untrusted search path vulnerability in VIM Development Group GVim before 7.3.034, and possibly other versions before 7.3.46, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse User32.dll or other DLL that is located in the same folder as a .TXT file. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD

Node

vimgvimRange≤7.3.033

vimgvimMatch7.3.01

vimgvimMatch7.3.02

vimgvimMatch7.3.03

vimgvimMatch7.3.04

vimgvimMatch7.3.05

vimgvimMatch7.3.06

vimgvimMatch7.3.07

vimgvimMatch7.3.08

vimgvimMatch7.3.09

vimgvimMatch7.3.010

vimgvimMatch7.3.011

vimgvimMatch7.3.012

vimgvimMatch7.3.013

vimgvimMatch7.3.014

vimgvimMatch7.3.015

vimgvimMatch7.3.016

vimgvimMatch7.3.017

vimgvimMatch7.3.018

vimgvimMatch7.3.019

vimgvimMatch7.3.020

vimgvimMatch7.3.021

vimgvimMatch7.3.022

vimgvimMatch7.3.023

vimgvimMatch7.3.024

vimgvimMatch7.3.025

vimgvimMatch7.3.026

vimgvimMatch7.3.027

vimgvimMatch7.3.028

vimgvimMatch7.3.029

vimgvimMatch7.3.030

vimgvimMatch7.3.031

vimgvimMatch7.3.032

CPENameOperatorVersion
vim:gvimvim gvimle7.3.033
vim:gvimvim gvimeq7.3.01
vim:gvimvim gvimeq7.3.02
vim:gvimvim gvimeq7.3.03
vim:gvimvim gvimeq7.3.04
vim:gvimvim gvimeq7.3.05
vim:gvimvim gvimeq7.3.06
vim:gvimvim gvimeq7.3.07
vim:gvimvim gvimeq7.3.08
vim:gvimvim gvimeq7.3.09

CPE	Name	Operator	Version
vim:gvim	vim gvim	le	7.3.033
vim:gvim	vim gvim	eq	7.3.01
vim:gvim	vim gvim	eq	7.3.02
vim:gvim	vim gvim	eq	7.3.03
vim:gvim	vim gvim	eq	7.3.04
vim:gvim	vim gvim	eq	7.3.05
vim:gvim	vim gvim	eq	7.3.06
vim:gvim	vim gvim	eq	7.3.07
vim:gvim	vim gvim	eq	7.3.08
vim:gvim	vim gvim	eq	7.3.09