CVE-2010-3145

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Microsoft Vista - 'fveapi.dll' BitLocker Drive Encryption API Hijacking2010-08-25 · local · windows

Impact

Untrusted search path vulnerability in the BitLocker Drive Encryption API, as used in sdclt.exe in Backup Manager in Microsoft Windows Vista SP1 and SP2, allows local users to gain privileges via a Trojan horse fveapi.dll file in the current working directory, as demonstrated by a directory that contains a Windows Backup Catalog (.wbcat) file, aka "Backup Manager Insecure Library Loading Vulnerability."

Affected products

References

• NVD record
• CVE.org record
• http://www.exploit-db.com/exploits/14751/
• http://www.securitytracker.com/id?1024948
• http://www.us-cert.gov/cas/techalerts/TA11-011A.html
• http://www.vupen.com/english/advisories/2011/0074
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-001
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12273
• http://www.exploit-db.com/exploits/14751/
• http://www.securitytracker.com/id?1024948
• http://www.us-cert.gov/cas/techalerts/TA11-011A.html
• http://www.vupen.com/english/advisories/2011/0074
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-001
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12273