Untrusted Search Path Vulnerability in Avast Free Antivirus by Avast
CVE-2010-3126

Currently unrated

Key Information:

Vendor

Avast

Status
Avast Antivirus Free
Vendor
CVE Published:
26 August 2010

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2010-3126?

This vulnerability allows local users and potentially remote attackers to execute arbitrary code on affected systems through a malicious mfc90loc.dll file. The exploit occurs when this DLL is placed in the same directory as an Avast license file, leading to unauthorized access and potential system compromises. Users are advised to update their Avast Free Antivirus to mitigate this risk.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2010-3126 - Proof of Concept

References

http://secunia.com/advisories/41109
third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2010/2175
vdb-entryx_refsource_VUPEN
http://www.exploit-db.com/exploits/14743
exploitx_refsource_EXPLOIT-DB

EPSS Score

7% chance of being exploited in the next 30 days.

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.