CVE-2010-3126: Critical severity Avast Avast Antivirus Free vulnerability
Untrusted search path vulnerability in avast! Free Antivirus version 5.0.594 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse mfc90loc.dll that is located in the same folder as an avast license (.avastlic) file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3126?
CVE-2010-3126 is classified as a high severity vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2010-3126?
To fix CVE-2010-3126, upgrade to avast! Free Antivirus version 5.0.595 or later immediately.
Who is affected by CVE-2010-3126?
CVE-2010-3126 affects users of avast! Free Antivirus versions 5.0.594 and earlier.
What type of attacks can CVE-2010-3126 enable?
CVE-2010-3126 can enable local users and remote attackers to execute arbitrary code through DLL hijacking.
What specific vulnerability does CVE-2010-3126 present?
CVE-2010-3126 presents an untrusted search path vulnerability that allows exploitation via a malicious mfc90loc.dll file.