Unscored severity · published Aug 26, 2010
CVE-2010-3126
Untrusted search path vulnerability in avast! Free Antivirus version 5.0.594 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct…
–
CVSS
7.8%
EPSS
No
On KEV
Description
Untrusted search path vulnerability in avast! Free Antivirus version 5.0.594 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse mfc90loc.dll that is located in the same folder as an avast license (.avastlic) file.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.8% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AA
Avast Antivirus Free · Avast
through 5.0.594 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3126
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3126
Vendor Advisory
http://secunia.com/advisories/41109
Exploit
http://www.exploit-db.com/exploits/14743
Vendor Advisory
http://www.vupen.com/english/advisories/2010/2175
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7193