Unscored severity · published Aug 27, 2010
CVE-2010-3140
Untrusted search path vulnerability in Microsoft Windows Internet Communication Settings on Windows XP SP3 allows local users, and possibly remote attackers, to execute arbitrary…
–
CVSS
15.1%
EPSS
No
On KEV
Description
Untrusted search path vulnerability in Microsoft Windows Internet Communication Settings on Windows XP SP3 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse schannel.dll that is located in the same folder as an ISP file.
Exploitation
Is it being used?
Exploit prediction (EPSS)15.1% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WX
Windows XP · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3140
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3140
Exploit
http://www.exploit-db.com/exploits/14780
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6743
More from Windows XP
9.8
CVE-2008-4250
Microsoft Windows Buffer Overflow Vulnerability
8.8
CVE-2013-3918
Microsoft Windows Out-of-Bounds Write Vulnerability
8.8
CVE-2011-3402
Microsoft Windows Remote Code Execution Vulnerability
8.8
CVE-2008-0015
Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability
8.8
CVE-2009-1537
Microsoft DirectX NULL Byte Overwrite Vulnerability