CVE-2010-3130: Critical severity Techsmith Snagit vulnerability

Published Aug 26, 2010

Updated

Untrusted search path vulnerability in TechSmith Snagit all versions 10.x and 11.x allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a snag, snagcc, or snagprof file.

Affected Software

1 affected component

Techsmith Snagit=10.0.0

Event History

Aug 26, 2010

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-3130?

CVE-2010-3130 has a medium severity rating due to its potential for local and remote code execution.

How do I fix CVE-2010-3130?

To mitigate CVE-2010-3130, ensure that all versions of TechSmith Snagit are upgraded to the latest version that addresses this vulnerability.

What versions of TechSmith Snagit are affected by CVE-2010-3130?

CVE-2010-3130 affects all versions of TechSmith Snagit 10.x and 11.x.

What kind of attacks can CVE-2010-3130 enable?

CVE-2010-3130 can enable DLL hijacking attacks that allow arbitrary code execution.

How does CVE-2010-3130 work?

CVE-2010-3130 exploits an untrusted search path vulnerability allowing malicious dwmapi.dll to be executed when a user opens a snag file.