What is CVE-2010-3140?

CVE-2010-3140 is a vulnerability in Microsoft Windows Xp. Published 2010-08-27.

Is CVE-2010-3140 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Microsoft Windows Xp

CVE-2010-3140

Untrusted search path vulnerability in Microsoft Windows Internet Communication Settings on Windows XP SP3 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse schannel.dll that is located in the same folder as an ISP file.

EPSS: 0.151 (96.4th percentile) — read the EPSS interpretation.

Affected products

Microsoft Windows_xp
N/a — versions n/a

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

cve@mitre.org (signature, x_refsource_OVAL, vdb-entry)
cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)

Frequently asked questions

What is CVE-2010-3140?: CVE-2010-3140 is a vulnerability in Microsoft Windows Xp. Published 2010-08-27.
Is CVE-2010-3140 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.