CVE-2010-3914

2010-11-0300:00:00

ubuntu.com

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.007

Percentile

80.6%

JSON

Untrusted search path vulnerability in VIM Development Group GVim before
7.3.034, and possibly other versions before 7.3.46, allows local users, and
possibly remote attackers, to execute arbitrary code and conduct DLL
hijacking attacks via a Trojan horse User32.dll or other DLL that is
located in the same folder as a .TXT file. NOTE: some of these details are
obtained from third party information.