CVE-2010-3138: Critical severity bsplayer BS.Player vulnerability
Untrusted search path vulnerability in the Indeo Codec in iac2532.ax in Microsoft Windows XP SP3 allows local users to gain privileges via a Trojan horse iacenc.dll file in the current working directory, as demonstrated by access through BS.Player or Media Player Classic to a directory that contains a .avi, .mka, .ra, or .ram file, aka "Indeo Codec Insecure Library Loading Vulnerability." NOTE: some of these details are obtained from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3138?
CVE-2010-3138 is considered a medium severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2010-3138?
To fix CVE-2010-3138, remove any untrusted DLL files from the current working directory and ensure proper access controls are enforced.
What software is affected by CVE-2010-3138?
CVE-2010-3138 affects Microsoft Windows XP SP3 and applications like BS.Player and Windows Media Player.
Who can exploit CVE-2010-3138?
Local users can exploit CVE-2010-3138 by placing a malicious iacenc.dll file in the working directory of an affected application.
What impact does CVE-2010-3138 have on systems?
The impact of CVE-2010-3138 includes the potential for local users to gain unauthorized privileges on the affected system.