CVE-2010-3914

Severity Score

9.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Untrusted search path vulnerability in VIM Development Group GVim before 7.3.034, and possibly other versions before 7.3.46, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse User32.dll or other DLL that is located in the same folder as a .TXT file. NOTE: some of these details are obtained from third party information.

Vulnerabilidad de ruta de búsqueda no confiable en VIM Development Group GVim anterior a v7.3.034, y posiblemente versiones anteriores a v7.3.46, permite a usuarios locales, y posiblemente atacantes remotos, la ejecución de código de su elección y llevar a cabo ataques de secuestro DLL a través de un troyano User32.dll u otra que se ubica en la misma carpeta que un archivo TXT. Nota: algunos de estos detalles han sido obtenidos a partir de información de terceros.

*Credits: N/A

CVSS Scores

NISTv2 9.3

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2010-10-12 CVE Reserved
2010-11-03 CVE Published
2024-09-16 CVE Updated
2024-09-17 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (5)

URL	Tag	Source
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000051.html	Third Party Advisory
http://www.securityfocus.com/bid/44588	Vdb Entry

URL	Date	SRC

URL	Date	SRC
ftp://ftp.vim.org/pub/vim/patches/7.3/7.3.034	2010-11-05
http://jvn.jp/en/jp/JVN27868039/index.html	2010-11-05

URL	Date	SRC
http://secunia.com/advisories/42084	2010-11-05

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				<= 7.3.033 Search vendor "Vim" for product "Gvim" and version " <= 7.3.033"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.01 Search vendor "Vim" for product "Gvim" and version "7.3.01"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.02 Search vendor "Vim" for product "Gvim" and version "7.3.02"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.03 Search vendor "Vim" for product "Gvim" and version "7.3.03"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.04 Search vendor "Vim" for product "Gvim" and version "7.3.04"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.05 Search vendor "Vim" for product "Gvim" and version "7.3.05"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.06 Search vendor "Vim" for product "Gvim" and version "7.3.06"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.07 Search vendor "Vim" for product "Gvim" and version "7.3.07"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.08 Search vendor "Vim" for product "Gvim" and version "7.3.08"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.09 Search vendor "Vim" for product "Gvim" and version "7.3.09"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.010 Search vendor "Vim" for product "Gvim" and version "7.3.010"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.011 Search vendor "Vim" for product "Gvim" and version "7.3.011"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.012 Search vendor "Vim" for product "Gvim" and version "7.3.012"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.013 Search vendor "Vim" for product "Gvim" and version "7.3.013"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.014 Search vendor "Vim" for product "Gvim" and version "7.3.014"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.015 Search vendor "Vim" for product "Gvim" and version "7.3.015"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.016 Search vendor "Vim" for product "Gvim" and version "7.3.016"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.017 Search vendor "Vim" for product "Gvim" and version "7.3.017"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.018 Search vendor "Vim" for product "Gvim" and version "7.3.018"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.019 Search vendor "Vim" for product "Gvim" and version "7.3.019"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.020 Search vendor "Vim" for product "Gvim" and version "7.3.020"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.021 Search vendor "Vim" for product "Gvim" and version "7.3.021"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.022 Search vendor "Vim" for product "Gvim" and version "7.3.022"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.023 Search vendor "Vim" for product "Gvim" and version "7.3.023"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.024 Search vendor "Vim" for product "Gvim" and version "7.3.024"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.025 Search vendor "Vim" for product "Gvim" and version "7.3.025"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.026 Search vendor "Vim" for product "Gvim" and version "7.3.026"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.027 Search vendor "Vim" for product "Gvim" and version "7.3.027"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.028 Search vendor "Vim" for product "Gvim" and version "7.3.028"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.029 Search vendor "Vim" for product "Gvim" and version "7.3.029"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.030 Search vendor "Vim" for product "Gvim" and version "7.3.030"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.031 Search vendor "Vim" for product "Gvim" and version "7.3.031"		-		Affected
Vim Search vendor "Vim"		Gvim Search vendor "Vim" for product "Gvim"				7.3.032 Search vendor "Vim" for product "Gvim" and version "7.3.032"		-		Affected