Vulnerability in Google Earth
CVE-2010-3134
Untrusted search path vulnerability in Google Earth 5.1.3535.3218 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse quserex.dll that is located in the same folder as a .kmz file.
EPSS: 0.038 (88.9th percentile) — read the EPSS interpretation.
Affected products
- Google Earth — versions 5.1.3535.3218
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (signature, x_refsource_OVAL, vdb-entry)