CVE-2010-3147: Critical severity Microsoft Outlook Express vulnerability
Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a Trojan horse wab32res.dll file in the current working directory, as demonstrated by a directory that contains a Windows Address Book (WAB), VCF (aka vCard), or P7C file, aka "Insecure Library Loading Vulnerability." NOTE: the codebase for this product may overlap the codebase for the product referenced in CVE-2010-3143.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3147?
CVE-2010-3147 is classified as a medium severity vulnerability that allows local users to execute a Trojan horse via a malicious wab32res.dll file.
How do I fix CVE-2010-3147?
To fix CVE-2010-3147, ensure that your system is updated with the latest security patches from Microsoft.
Which systems are affected by CVE-2010-3147?
CVE-2010-3147 affects Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 and Windows 7.
What type of attack is associated with CVE-2010-3147?
CVE-2010-3147 is associated with a DLL hijacking attack that can lead to privilege escalation.
Is there a workaround for CVE-2010-3147?
A temporary workaround for CVE-2010-3147 includes restricting access to the wab.exe application or monitoring for the presence of unauthorized wab32res.dll files.