CVE-2010-3126

published 2010-08-26

CVE-2010-3126: Untrusted search path vulnerability in avast! Free Antivirus version 5.0.594 and earlier allows local users, and possibly remote attackers, to execute…

Priority P3 48 critical 9.3 CVSS 2.0

AV N AC M Au N C C I C A C

EXPLOIT

Untrusted search path vulnerability in avast! Free Antivirus version 5.0.594 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse mfc90loc.dll that is located in the same folder as an avast license (.avastlic) file.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
avast	avast_antivirus_free	<= 5.0.594	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.