Untrusted Search Path Vulnerabilities in Microsoft Groove 2007 SP2
CVE-2010-3146

Currently unrated

Key Information:

Vendor

Microsoft
Status
Groove
Vendor
CVE Published:
27 August 2010

What is CVE-2010-3146?

Multiple untrusted search path vulnerabilities in Microsoft Groove 2007 SP2 can be exploited by local users to gain unauthorized privileges. This occurs through the exploitation of specific DLL files, such as mso.dll or GroovePerfmon.dll, placed in the working directory. These vulnerabilities are particularly dangerous when users handle Groove vCard (.vcg) or Groove Tool Archive (.gta) files, as attackers can leverage these vectors to load malicious libraries and execute arbitrary code, posing significant risks to system integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.vupen.com/english/advisories/2010/2188
vdb-entryx_refsource_VUPEN
http://www.exploit-db.com/exploits/14746/
exploitx_refsource_EXPLOIT-DB
http://www.us-cert.gov/cas/techalerts/TA11-067A.html
third-party-advisoryx_refsource_CERT

EPSS Score

28% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.