CVE-2010-3143

CRÍTICO 9.3CVE-2010-3143 · Published 27/08/2010 · updated 16/06/2026

En resumen

CVE-2010-3143 es una vulnerabilidad CRÍTICO (CVSS 9.3).
Probabilidad de explotación en los próximos 30 días (EPSS): 20.8%, mayor que el 97.5% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Untrusted search path vulnerability in Microsoft Windows Contacts allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wab32res.dll that is located in the same folder as a .contact, .group, .p7c, .vcf, or .wab file. NOTE: the codebase for this product may overlap the codebase for the product referenced in CVE-2010-3147.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free