Unscored severity · published Nov 3, 2010
CVE-2010-3914
Untrusted search path vulnerability in VIM Development Group GVim before 7.3.034, and possibly other versions before 7.3.46, allows local users, and possibly remote attackers, to…
–
CVSS
9.1%
EPSS
No
On KEV
Description
Untrusted search path vulnerability in VIM Development Group GVim before 7.3.034, and possibly other versions before 7.3.46, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse User32.dll or other DLL that is located in the same folder as a .TXT file. NOTE: some of these details are obtained from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)9.1% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GV
Gvim · Vim
through 7.3.033; 7.3.01; 7.3.02; 7.3.03; 7.3.04; 7.3.05; +27 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3914
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3914
Patch
http://jvn.jp/en/jp/JVN27868039/index.html
jvndb.jvn.jp
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000051.html
Vendor Advisory
http://secunia.com/advisories/42084
www.securityfocus.com
http://www.securityfocus.com/bid/44588
More from Gvim
7.8
CVE-2022-37173
An issue in the installer of gvim 9.0.0000 allows authenticated attackers to execute arbitrary code via a binary hijacking attack on C:\Program.exe