VDB
CVE-2010-3914
CVE-2010-3914
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Untrusted search path vulnerability in VIM Development Group GVim before 7.3.034, and possibly other versions before 7.3.46, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse User32.dll or other DLL that is located in the same folder as a .TXT file. NOTE: some of these details are obtained from third party information.
EPSS 9.09% · 95.2th percentile
Risk Scores
CVSS 2.0
9.300000190734863
EPSS Score
9.09%
95.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | * |
| vim | gvim | 7.3.08, 0, 7.3.01 |
Timeline
- Nov 3, 2010 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Feb 10, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 27, 2023 EPSS Score
- Jul 19, 2023 EPSS Score
- Sep 9, 2023 EPSS Score
References
- https://nvd.nist.gov/vuln/detail/CVE-2010-3914 advisory
- http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000051.html url
- http://secunia.com/advisories/42084 url
- ftp://ftp.vim.org/pub/vim/patches/7.3/7.3.034 patch
- http://jvn.jp/en/jp/JVN27868039/index.html patch
- http://www.securityfocus.com/bid/44588 technical