CVE-2010-3148

CVE-2010-3148 relates to an insecure library loading vulnerability in Microsoft Visio 2003 SP3. The root cause is loading an unintended DLL (notably mfc71enu.dll) from the current working directory, enabling a Trojan horse DLL to be used via crafted Visio files (e.g., .vsd, .vdx, .vst, .vtx). The...