CVE-2010-3147

Description

Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a Trojan horse wab32res.dll file in the current working directory, as demonstrated by a directory that contains a Windows Address Book (WAB), VCF (aka vCard), or P7C file, aka Insecure Library Loading Vulnerability. NOTE: the codebase for this product may overlap the codebase for the product referenced in CVE-2010-3143.

Risk Information

Base Score
8.8
MODERATE
Vector
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
25.085

Associated Vulnerability

VulnerabilityOS Platform
ms10-096: vulnerability in windows address book could allow remote code execution for Windows XP (KB2423089)Windows
ms10-096: vulnerability in windows address book could allow remote code execution for Windows Server 2003 (KB2423089)Windows
ms10-096: vulnerability in windows address book could allow remote code execution for Windows Vista (KB2423089) x86 based systemsWindows
ms10-096: vulnerability in windows address book could allow remote code execution for Windows Vista (KB2423089) x86 based systems for SP2Windows
ms10-096: vulnerability in windows address book could allow remote code execution for Windows Server 2008 (KB2423089) x86 based systemsWindows
ms10-096: vulnerability in windows address book could allow remote code execution for Windows Server 2008 (KB2423089) x86 based systems for SP2Windows
ms10-096: vulnerability in windows address book could allow remote code execution for Windows 7 (KB2423089)Windows
ms10-096: vulnerability in windows address book could allow remote code execution for Windows XP x64 Edition (KB2423089)Windows
ms10-096: vulnerability in windows address book could allow remote code execution for Windows Server 2003 x64 Edition (KB2423089)Windows
ms10-096: vulnerability in windows address book could allow remote code execution for Windows Vista for x64-based Systems (KB2423089)Windows
ms10-096: vulnerability in windows address book could allow remote code execution for Windows Vista for x64-based Systems (KB2423089) for SP2Windows
ms10-096: vulnerability in windows address book could allow remote code execution for Windows Server 2008 x64 Edition (KB2423089)Windows
ms10-096: vulnerability in windows address book could allow remote code execution for Windows Server 2008 x64 Edition (KB2423089) for SP2Windows
ms10-096: vulnerability in windows address book could allow remote code execution for Windows 7 for x64-based Systems (KB2423089)Windows
ms10-096: vulnerability in windows address book could allow remote code execution for Windows Server 2008 R2 x64 Edition (KB2423089)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-9573Security Update for Windows Server 2008 (KB2423089)
PATCH-9574Security Update for Windows Server 2008 (KB2423089)
PATCH-9575Security Update for Windows 7 (KB2423089)
PATCH-9580Security Update for Windows Server 2008 x64 Edition (KB2423089)
PATCH-9581Security Update for Windows Server 2008 x64 Edition (KB2423089)
PATCH-9582Security Update for Windows 7 for x64-based Systems (KB2423089)
PATCH-9583Security Update for Windows Server 2008 R2 x64 Edition (KB2423089)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234