Untrusted Search Path Vulnerability in Avast Free Antivirus by Avast
CVE-2010-3126

Currently unrated

Key Information:

Vendor

Avast

Status
Avast Antivirus Free
Vendor
CVE Published:
26 August 2010

What is CVE-2010-3126?

This vulnerability allows local users and potentially remote attackers to execute arbitrary code on affected systems through a malicious mfc90loc.dll file. The exploit occurs when this DLL is placed in the same directory as an Avast license file, leading to unauthorized access and potential system compromises. Users are advised to update their Avast Free Antivirus to mitigate this risk.

References

http://secunia.com/advisories/41109
third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2010/2175
vdb-entryx_refsource_VUPEN
http://www.exploit-db.com/exploits/14743
exploitx_refsource_EXPLOIT-DB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.