critical9.3Public exploit code
CVE-2010-3126
Untrusted search path vulnerability in avast!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Avast! 5.0.594 - 'mfc90loc.dll' License Files DLL Hijacking2010-08-25 · local · windows
Impact
Untrusted search path vulnerability in avast! Free Antivirus version 5.0.594 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse mfc90loc.dll that is located in the same folder as an avast license (.avastlic) file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Avast | Avast Antivirus Free | through 5.0.594 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/41109
- http://www.exploit-db.com/exploits/14743
- http://www.vupen.com/english/advisories/2010/2175
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7193
- http://secunia.com/advisories/41109
- http://www.exploit-db.com/exploits/14743
- http://www.vupen.com/english/advisories/2010/2175
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7193