PT-2010-4592 · Microsoft · Windows Vista+6

Hd Moore + 2 · Published 2010-08-27 · Updated 2023-12-07 · CVE-2010-3147

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Address Book version 6.00.2900.5512 in Microsoft Windows XP SP2 and SP3 Windows Address Book in Windows Server 2003 SP2 Windows Address Book in Windows Vista SP1 and SP2 Windows Address Book in Windows Server 2008 Gold, SP2, and R2 Windows Address Book in Windows 7

Description The issue allows local users to gain privileges via a Trojan horse wab32res.dll file in the current working directory. This can occur in directories containing Windows Address Book (WAB), VCF (aka vCard), or P7C files. A remote code execution vulnerability exists in the way Windows Address Book handles the loading of DLL files, potentially allowing an attacker to take complete control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Windows XP SP2 and SP3, consider disabling the wab.exe until a patch is available. For Windows Server 2003 SP2, restrict access to the Windows Address Book to minimize the risk of exploitation. For Windows Vista SP1 and SP2, avoid using the Windows Address Book in directories that may contain malicious wab32res.dll files. For Windows Server 2008 Gold, SP2, and R2, and Windows 7, apply configuration changes to prevent the loading of untrusted DLL files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2010-3147

Affected Products

Windows

Windows 7

Windows Address Book

Windows Server 2003

Windows Server 2008

Windows Vista

Windows Xp

References · 12

• 🔥 https://exploit-db.com/exploits/14778 · Exploit
• 🔥 https://exploit-db.com/exploits/14745 · Exploit
• 🔥 http://exploit-db.com/exploits/14745 · Exploit
• 🔥 https://exploit-db.com/exploits/14733 · Exploit
• 🔥 http://attackvector.org/new-dll-hijacking-exploits-many · Exploit
• http://secunia.com/advisories/41050 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3147 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-096 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-3147 · Security Note
• http://securitytracker.com/id?1024878 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12352 · Note
• http://us-cert.gov/cas/techalerts/TA10-348A.html · Note