CVE-2010-3966

Severity

93%

Complexity

86%

Confidentiality

165%

Per: http://cwe.mitre.org/data/definitions/426.html 'CWE-426: Untrusted Search Path'

Untrusted search path vulnerability in Microsoft Windows Server 2008 R2 and Windows 7, when BranchCache is supported, allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an EML file, an RSS file, or a WPOST file, aka "BranchCache Insecure Library Loading Vulnerability."

Per: http://www.microsoft.com/technet/security/Bulletin/MS10-095.mspx 'This is a remote code execution vulnerability.'

Per: http://cwe.mitre.org/data/definitions/426.html 'CWE-426: Untrusted Search Path'

CVSS 2.0 Base Score 9.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:C/I:C/A:C).

Overview

First reported 14 years ago

2010-12-16 19:33:00

Last updated 6 years ago

2018-10-30 16:27:00

Affected Software

Microsoft Windows 7

Windows Server 2008 R2 for Itanium-based Systems

r2

Windows Server 2008 R2 for 32-bit Systems

r2

References

69816

42609

Vendor Advisory

45295

1024877

TA10-348A

US Government Resource

ADV-2010-3218