Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2010-3134

4 documents4 sources
Severity
9.3CRITICAL
EPSS
1.5%
top 19.09%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Google Earth
Timeline
PublishedAug 26
Latest updateMay 17

Description

Untrusted search path vulnerability in Google Earth 5.1.3535.3218 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse quserex.dll that is located in the same folder as a .kmz file.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDgoogle/earth5.1.3535.3218

🔴Vulnerability Details

2
GHSA
GHSA-6w5v-m52c-jm3g: Untrusted search path vulnerability in Google Earth 5↗2022-05-17
▶
CVEList
CVE-2010-3134: Untrusted search path vulnerability in Google Earth 5↗2010-08-26
▶

💥Exploits & PoCs

1
Exploit-DB
Google Earth 5.1.3535.3218 - 'quserex.dll' DLL Hijacking↗2010-08-25
▶
CVE-2010-3134 (CRITICAL CVSS 9.3) | Untrusted search path vulnerability | cvebase.io