Description
Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C++ 2005 SP1, 2008 SP1, and 2010; and Exchange Server 2010 Service Pack 3, 2013, and 2013 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory during execution of an MFC application such as AtlTraceTool8.exe (aka ATL MFC Trace Tool), as demonstrated by a directory that contains a TRC, cur, rs, rct, or res file, aka "MFC Insecure Library Loading Vulnerability."
Published: 2010-08-31
Score: 7.8 High
EPSS: 46.7% Moderate
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 28 May 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Subscriptions

Apple Itunes
Microsoft Visual C\+\+ Visual Studio Visual Studio .net
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-05-28T18:28:46.313Z

Reserved: 2010-08-31T00:00:00.000Z

Link: CVE-2010-3190

cve-icon Vulnrichment

Updated: 2024-08-07T03:03:18.775Z

cve-icon NVD

Status : Modified

Published: 2010-08-31T20:00:02.297

Modified: 2026-05-28T19:16:23.390

Link: CVE-2010-3190

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses