CVE-2010-3140

high · 9.3

Untrusted search path vulnerability in Microsoft Windows Internet Communication Settings on Windows XP SP3 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse schannel.dll that is located in the same folder as an ISP file.

9.3

CVSS

15.1%

EPSS (exploit prob.)

97th

EPSS percentile

2010-08-27

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

Vendor	Product	Affected versions
microsoft	windows_xp	all versions

Check a specific version with /api/v1/cve/match.

References

http://www.exploit-db.com/exploits/14780
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6743
http://www.exploit-db.com/exploits/14780
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6743

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2010-3140