Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2010-3914
Deferred
More InfoOfficial Page
Source-vultures@jpcert.or.jp
View Known Exploited Vulnerability (KEV) details
Published At-03 Nov, 2010 | 13:37
Updated At-11 Apr, 2025 | 00:51

Untrusted search path vulnerability in VIM Development Group GVim before 7.3.034, and possibly other versions before 7.3.46, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse User32.dll or other DLL that is located in the same folder as a .TXT file. NOTE: some of these details are obtained from third party information.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.09.3HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
CPE Matches
Vim
vim
>>gvim>>Versions up to 7.3.033(inclusive)
cpe:2.3:a:vim:gvim:*:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.01
cpe:2.3:a:vim:gvim:7.3.01:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.02
cpe:2.3:a:vim:gvim:7.3.02:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.03
cpe:2.3:a:vim:gvim:7.3.03:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.04
cpe:2.3:a:vim:gvim:7.3.04:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.05
cpe:2.3:a:vim:gvim:7.3.05:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.06
cpe:2.3:a:vim:gvim:7.3.06:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.07
cpe:2.3:a:vim:gvim:7.3.07:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.08
cpe:2.3:a:vim:gvim:7.3.08:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.09
cpe:2.3:a:vim:gvim:7.3.09:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.010
cpe:2.3:a:vim:gvim:7.3.010:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.011
cpe:2.3:a:vim:gvim:7.3.011:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.012
cpe:2.3:a:vim:gvim:7.3.012:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.013
cpe:2.3:a:vim:gvim:7.3.013:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.014
cpe:2.3:a:vim:gvim:7.3.014:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.015
cpe:2.3:a:vim:gvim:7.3.015:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.016
cpe:2.3:a:vim:gvim:7.3.016:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.017
cpe:2.3:a:vim:gvim:7.3.017:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.018
cpe:2.3:a:vim:gvim:7.3.018:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.019
cpe:2.3:a:vim:gvim:7.3.019:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.020
cpe:2.3:a:vim:gvim:7.3.020:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.021
cpe:2.3:a:vim:gvim:7.3.021:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.022
cpe:2.3:a:vim:gvim:7.3.022:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.023
cpe:2.3:a:vim:gvim:7.3.023:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.024
cpe:2.3:a:vim:gvim:7.3.024:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.025
cpe:2.3:a:vim:gvim:7.3.025:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.026
cpe:2.3:a:vim:gvim:7.3.026:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.027
cpe:2.3:a:vim:gvim:7.3.027:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.028
cpe:2.3:a:vim:gvim:7.3.028:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.029
cpe:2.3:a:vim:gvim:7.3.029:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.030
cpe:2.3:a:vim:gvim:7.3.030:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.031
cpe:2.3:a:vim:gvim:7.3.031:*:*:*:*:*:*:*
Vim
vim
>>gvim>>7.3.032
cpe:2.3:a:vim:gvim:7.3.032:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
NVD-CWE-OtherPrimarynvd@nist.gov
Evaluator Description
Per: http://cwe.mitre.org/data/definitions/426.html 'CWE-426: Untrusted Search Path'
Evaluator Impact

http://www.kb.cert.org/vuls/id/707943

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
ftp://ftp.vim.org/pub/vim/patches/7.3/7.3.034vultures@jpcert.or.jp
Patch
http://jvn.jp/en/jp/JVN27868039/index.htmlvultures@jpcert.or.jp
Patch
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000051.htmlvultures@jpcert.or.jp
N/A
http://secunia.com/advisories/42084vultures@jpcert.or.jp
Vendor Advisory
http://www.securityfocus.com/bid/44588vultures@jpcert.or.jp
N/A
ftp://ftp.vim.org/pub/vim/patches/7.3/7.3.034af854a3a-2127-422b-91ae-364da2661108
Patch
http://jvn.jp/en/jp/JVN27868039/index.htmlaf854a3a-2127-422b-91ae-364da2661108
Patch
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000051.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
http://secunia.com/advisories/42084af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.securityfocus.com/bid/44588af854a3a-2127-422b-91ae-364da2661108
N/A
Change History
0Changes found
Details not found