PT-2010-4602 · Microsoft · Windows Explorer

Xacrett · Published 2010-10-19 · Updated 2010-10-28 · CVE-2010-3157

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions XacRett versions prior to 50

Description The issue allows attackers to execute arbitrary code via a Trojan horse executable file. This is related to the explorer.exe filename and the use of Windows Explorer.

Recommendations For versions prior to 50, update to version 50 or later to resolve the issue. As a temporary workaround, consider restricting the execution of files from untrusted search paths to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2010-3157

Affected Products

Windows Explorer

References · 6

• http://secunia.com/advisories/41850 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-3157 · Security Note
• http://securityfocus.com/bid/44125 · Note
• http://jvn.jp/jp/JVN04665167/index.html · Note
• http://kmonos.net/lib/info/xacr49-vul.ja.html · Note
• http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000040.html · Note