VulnerabilityModified
CVE-2010-3126
Untrusted search path vulnerability in avast!
HIGH 9.3EPSS 7.83%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (7.83%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Untrusted search path vulnerability in avast! Free Antivirus version 5.0.594 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse mfc90loc.dll that is located in the same folder as an avast license (.avastlic) file.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 7.83% probability · 94th percentile
- CISA KEV
- Not listed
- Affected
- avast/avast antivirus free
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/41109Vendor Advisory
- http://www.exploit-db.com/exploits/14743Exploit
- http://www.vupen.com/english/advisories/2010/2175Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7193
- http://secunia.com/advisories/41109Vendor Advisory
- http://www.exploit-db.com/exploits/14743Exploit
- http://www.vupen.com/english/advisories/2010/2175Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7193
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.