CVE-2010-3124

high · 9.3

Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll that is located in the same folder as a .mp3 file.

9.3

CVSS

12.5%

EPSS (exploit prob.)

96th

EPSS percentile

2010-08-26

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

Vendor	Product	Affected versions
videolan	vlc_media_player	<= 1.1.3
videolan	vlc_media_player	0.1.99b
videolan	vlc_media_player	0.1.99e
videolan	vlc_media_player	0.1.99f
videolan	vlc_media_player	0.1.99g
videolan	vlc_media_player	0.1.99h
videolan	vlc_media_player	0.1.99i
videolan	vlc_media_player	0.2.0
videolan	vlc_media_player	0.2.60
videolan	vlc_media_player	0.2.61
videolan	vlc_media_player	0.2.62
videolan	vlc_media_player	0.2.63
videolan	vlc_media_player	0.2.70
videolan	vlc_media_player	0.2.71
videolan	vlc_media_player	0.2.72
videolan	vlc_media_player	0.2.73
videolan	vlc_media_player	0.2.80
videolan	vlc_media_player	0.2.81
videolan	vlc_media_player	0.2.82
videolan	vlc_media_player	0.2.83
videolan	vlc_media_player	0.2.90
videolan	vlc_media_player	0.2.91
videolan	vlc_media_player	0.2.92
videolan	vlc_media_player	0.3.0
videolan	vlc_media_player	0.3.1
videolan	vlc_media_player	0.4.0
videolan	vlc_media_player	0.4.1
videolan	vlc_media_player	0.4.2
videolan	vlc_media_player	0.4.3
videolan	vlc_media_player	0.4.4
videolan	vlc_media_player	0.4.5
videolan	vlc_media_player	0.4.6
videolan	vlc_media_player	0.5.0
videolan	vlc_media_player	0.5.1
videolan	vlc_media_player	0.5.2
videolan	vlc_media_player	0.5.3
videolan	vlc_media_player	0.6.0
videolan	vlc_media_player	0.6.1
videolan	vlc_media_player	0.6.2
videolan	vlc_media_player	0.7.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2010-3124