CVE-2010-3965
Severity Score
9.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Untrusted search path vulnerability in Windows Media Encoder 9 on Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Windows Media Profile (PRX) file, aka "Insecure Library Loading Vulnerability."
Vulnerabilidad de ruta de búsqueda no confiable en Windows Media Encoder 9 en Microsoft Windows XP SP2 y SP3, Windows Server 2003 SP2, Windows Vista SP1 y SP2, y Windows Server 2008 Gold y SP2 permite a usuarios locales aumentar sus privilegios mediante un Troyano DLL en el directorio de trabajo actual, como se ha demostrado por un directorio que contiene un fichero Windows Media Profile (PRX). También se conoce como "Vulnerabilidad de Carga Insegura de Bibliotecas"
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2010-10-14 CVE Reserved
- 2010-12-16 CVE Published
- 2024-08-07 CVE Updated
- 2024-09-20 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/42855 | Vdb Entry | |
| http://www.securitytracker.com/id?1024876 | Vdb Entry | |
| http://www.us-cert.gov/cas/techalerts/TA10-348A.html | Third Party Advisory | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12235 | Signature |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.vupen.com/english/advisories/2010/3217 | 2023-12-07 | |
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-094 | 2023-12-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9 Search vendor "Microsoft" for product "Windows Media Encoder" and version "9" | x86 |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Server 2003 Search vendor "Microsoft" for product "Windows Server 2003" | * | sp2 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9 Search vendor "Microsoft" for product "Windows Media Encoder" and version "9" | x86 |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Server 2008 Search vendor "Microsoft" for product "Windows Server 2008" | * | x32 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9 Search vendor "Microsoft" for product "Windows Media Encoder" and version "9" | x86 |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Server 2008 Search vendor "Microsoft" for product "Windows Server 2008" | * | x64 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9 Search vendor "Microsoft" for product "Windows Media Encoder" and version "9" | x86 |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Server 2008 Search vendor "Microsoft" for product "Windows Server 2008" | * | sp2, x32 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9 Search vendor "Microsoft" for product "Windows Media Encoder" and version "9" | x86 |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Server 2008 Search vendor "Microsoft" for product "Windows Server 2008" | * | sp2, x64 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9 Search vendor "Microsoft" for product "Windows Media Encoder" and version "9" | x86 |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Vista Search vendor "Microsoft" for product "Windows Vista" | * | sp1 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9 Search vendor "Microsoft" for product "Windows Media Encoder" and version "9" | x86 |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Vista Search vendor "Microsoft" for product "Windows Vista" | * | sp2 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9 Search vendor "Microsoft" for product "Windows Media Encoder" and version "9" | x86 |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | sp3 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9 Search vendor "Microsoft" for product "Windows Media Encoder" and version "9" | x86 |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | - | sp2, x64 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9_series Search vendor "Microsoft" for product "Windows Media Encoder" and version "9_series" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Server 2003 Search vendor "Microsoft" for product "Windows Server 2003" | * | sp2 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9_series Search vendor "Microsoft" for product "Windows Media Encoder" and version "9_series" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Server 2008 Search vendor "Microsoft" for product "Windows Server 2008" | * | x32 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9_series Search vendor "Microsoft" for product "Windows Media Encoder" and version "9_series" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Server 2008 Search vendor "Microsoft" for product "Windows Server 2008" | * | x64 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9_series Search vendor "Microsoft" for product "Windows Media Encoder" and version "9_series" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Server 2008 Search vendor "Microsoft" for product "Windows Server 2008" | * | sp2, x32 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9_series Search vendor "Microsoft" for product "Windows Media Encoder" and version "9_series" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Server 2008 Search vendor "Microsoft" for product "Windows Server 2008" | * | sp2, x64 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9_series Search vendor "Microsoft" for product "Windows Media Encoder" and version "9_series" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Vista Search vendor "Microsoft" for product "Windows Vista" | * | sp1 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9_series Search vendor "Microsoft" for product "Windows Media Encoder" and version "9_series" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Vista Search vendor "Microsoft" for product "Windows Vista" | * | sp2 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9_series Search vendor "Microsoft" for product "Windows Media Encoder" and version "9_series" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | sp3 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9_series Search vendor "Microsoft" for product "Windows Media Encoder" and version "9_series" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | - | sp2, x64 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9 Search vendor "Microsoft" for product "Windows Media Encoder" and version "9" | x64 |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Server 2003 Search vendor "Microsoft" for product "Windows Server 2003" | * | sp2 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9 Search vendor "Microsoft" for product "Windows Media Encoder" and version "9" | x64 |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Server 2008 Search vendor "Microsoft" for product "Windows Server 2008" | * | x64 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9 Search vendor "Microsoft" for product "Windows Media Encoder" and version "9" | x64 |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Vista Search vendor "Microsoft" for product "Windows Vista" | * | sp1 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9 Search vendor "Microsoft" for product "Windows Media Encoder" and version "9" | x64 |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Vista Search vendor "Microsoft" for product "Windows Vista" | * | sp2 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9 Search vendor "Microsoft" for product "Windows Media Encoder" and version "9" | x64 |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | - | sp2, x64 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9_series Search vendor "Microsoft" for product "Windows Media Encoder" and version "9_series" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Server 2003 Search vendor "Microsoft" for product "Windows Server 2003" | * | sp2 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9_series Search vendor "Microsoft" for product "Windows Media Encoder" and version "9_series" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Server 2008 Search vendor "Microsoft" for product "Windows Server 2008" | * | x64 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9_series Search vendor "Microsoft" for product "Windows Media Encoder" and version "9_series" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Vista Search vendor "Microsoft" for product "Windows Vista" | * | sp1 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9_series Search vendor "Microsoft" for product "Windows Media Encoder" and version "9_series" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Vista Search vendor "Microsoft" for product "Windows Vista" | * | sp2 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9_series Search vendor "Microsoft" for product "Windows Media Encoder" and version "9_series" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | - | sp2, x64 |
Safe
|