CVEvulnerability
CVE-2010-3145
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-08-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Untrusted search path vulnerability in the BitLocker Drive Encryption API, as used in sdclt.exe in Backup Manager in Microsoft Windows Vista SP1 and SP2, allows local users to gain privileges via a Trojan horse fveapi.dll file in the current working directory, as demonstrated by a directory that contains a Windows Backup Catalog (.wbcat) file, aka "Backup Manager Insecure Library Loading Vulnerability."
Affected configurations
• microsoft windows vista
References
- http://www.exploit-db.com/exploits/14751/ Exploit
- http://www.securitytracker.com/id?1024948 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA11-011A.html US Government Resource
- http://www.vupen.com/english/advisories/2011/0074 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-001 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12273 oval.cisecurity.org
- http://www.exploit-db.com/exploits/14751/ Exploit
- http://www.securitytracker.com/id?1024948 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA11-011A.html US Government Resource
- http://www.vupen.com/english/advisories/2011/0074 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-001 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12273 oval.cisecurity.org