CVE-2010-3124

Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll that is located in the same folder as a .mp3 file.

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2010-08-26

Last modified

2024-08-07

Affected products

• Vlc Media Player (Videolan)

References

• http://git.videolan.org/?p=vlc/vlc-1.1.git%3Ba=blobdiff%3Bf=bin/winvlc.c%3Bh=ac9b97ca9f5f9ba001f13bf61eb5127a1c1dbcbf%3…
• http://secunia.com/advisories/41107
• http://www.exploit-db.com/exploits/14750
• http://www.openwall.com/lists/oss-security/2010/08/25/10
• http://www.openwall.com/lists/oss-security/2010/08/25/9
• http://www.vupen.com/english/advisories/2010/2172
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12190