PT-2010-4583 · Intel+1 · Indeo Codec+2

Gjoko Krstic · Publicado 2010-08-27 · Atualizado 2018-10-12 · CVE-2010-3138

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP SP3

Description The issue allows local users to gain privileges via a Trojan horse iacenc.dll file in the current working directory. This can be demonstrated by access through media players to a directory containing specific file types, such as .avi, .mka, .ra, or .ram files. A remote code execution vulnerability exists in the way the Indeo Codec handles the loading of DLL files, potentially allowing an attacker to take complete control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Windows XP SP3, consider restricting access to the Indeo Codec or avoiding the use of potentially vulnerable media players until a fix is available. As a temporary workaround, users should be cautious of directories containing .avi, .mka, .ra, or .ram files and avoid using them with media players that could trigger the vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2010-3138

Produtos afetados

Indeo Codec

Windows

Windows Xp

Referências · 14

• 🔥 http://exploit-db.com/exploits/14788 · Exploit
• 🔥 https://exploit-db.com/exploits/14765 · Exploit
• 🔥 http://exploit-db.com/exploits/14765 · Exploit
• 🔥 https://exploit-db.com/exploits/14788 · Exploit
• http://technet.microsoft.com/en-us/security/bulletin/ms12-014 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3138 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-014 · Aviso do Fabricante
• http://vupen.com/english/advisories/2010/2190 · Aviso do Fabricante
• http://secunia.com/advisories/41114 · Aviso do Fabricante
• http://zeroscience.mk/en/vulnerabilities/ZSL-2010-4956.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-3138 · Nota de Segurança
• http://osvdb.org/67588 · Nota
• http://us-cert.gov/cas/techalerts/TA12-045A.html · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7132 · Nota