CVE-2010-3138

Currently unrated

Key Information:

Vendor
Microsoft
Status
Windows Media Player
Windows Xp
Vendor
CVE Published:
27 August 2010

Summary

Untrusted search path vulnerability in the Indeo Codec in iac25_32.ax in Microsoft Windows XP SP3 allows local users to gain privileges via a Trojan horse iacenc.dll file in the current working directory, as demonstrated by access through BS.Player or Media Player Classic to a directory that contains a .avi, .mka, .ra, or .ram file, aka "Indeo Codec Insecure Library Loading Vulnerability." NOTE: some of these details are obtained from third party information.

References

http://www.us-cert.gov/cas/techalerts/TA12-045A.html
third-party-advisoryx_refsource_CERT
http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-495...
x_refsource_MISC
http://www.exploit-db.com/exploits/14765
exploitx_refsource_EXPLOIT-DB

EPSS Score

96% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.