CVE-2010-3190
published 2010-08-31CVE-2010-3190: Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1…
PriorityP338high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
9.04%
94.7th percentile
Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C++ 2005 SP1, 2008 SP1, and 2010; and Exchange Server 2010 Service Pack 3, 2013, and 2013 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory during execution of an MFC application such as AtlTraceTool8.exe (aka ATL MFC Trace Tool), as demonstrated by a directory that contains a TRC, cur, rs, rct, or res file, aka "MFC Insecure Library Loading Vulnerability."
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | itunes | — | — |
| apple | itunes | — | — |
| microsoft | visual_c | — | — |
| microsoft | visual_c | — | — |
| microsoft | visual_c | — | — |
| microsoft | visual_studio | — | — |
| microsoft | visual_studio | — | — |
| microsoft | visual_studio | — | — |
| microsoft | visual_studio_net | — | — |
| msrc | microsoft_exchange_server_2010_service_pack_3 | — | — |
| msrc | microsoft_exchange_server_2013 | — | — |
| msrc | microsoft_exchange_server_2016 | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
vendor_msrc9.3HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Microsoft
MFC Insecure Library Loading Vulnerability
vendor_msrc·2018-10-09·CVSS 9.3
CVE-2010-3190 [CRITICAL] MFC Insecure Library Loading Vulnerability
MFC Insecure Library Loading Vulnerability
Description: A remote code execution vulnerability exists in the way that certain applications built using Microsoft Foundation Classes (MFC) handle the loading of DLL files.
An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
The update addresses this vulnerability by correcting how applications built using MFC load DLL files.
FAQ: Why is Microsoft documenting a 2010 CVE in this release?
Exchange Server was not identified
Apple
CVE-2010-3190: iTunes 12.3
vendor_apple·CVSS 9.3
CVE-2010-3190 [CRITICAL] CVE-2010-3190: iTunes 12.3
Apple Security Update: About the security content of iTunes 12.3
Product: iTunes
Version: 12.3
CVE: CVE-2010-3190
Component: CVE-ID
Impact: A man-in-the-middle attack while browsing the iTunes Store via iTunes may result in unexpected application termination or arbitrary code execution
Description: Multiple memory corruption issues existed in WebKit. These issues were addressed through improved memory handling.
VulDB
Microsoft Exchange Server 2010 SP3/2013/2016 MFC Library Loader untrusted search path (Nessus ID 86001 / ID 53017)
vuldb·2026-05-29·CVSS 7.8
CVE-2010-3190 [HIGH] Microsoft Exchange Server 2010 SP3/2013/2016 MFC Library Loader untrusted search path (Nessus ID 86001 / ID 53017)
A vulnerability identified as problematic has been detected in Microsoft Exchange Server 2010 SP3/2013/2016. This affects an unknown part of the component MFC Library Loader. Performing a manipulation results in untrusted search path.
This vulnerability is reported as CVE-2010-3190. The attack requires a local approach. No exploit exists.
It is recommended to apply a patch to fix this issue.
VulDB
Apple iTunes up to 12.2 WebKit access control (HT205221 / Nessus ID 86001)
vuldb·2026-05-29·CVSS 7.8
CVE-2010-3190 [HIGH] Apple iTunes up to 12.2 WebKit access control (HT205221 / Nessus ID 86001)
A vulnerability has been found in Apple iTunes up to 12.2 and classified as critical. Impacted is an unknown function of the component WebKit. The manipulation leads to improper access controls.
This vulnerability is referenced as CVE-2010-3190. Remote exploitation of the attack is possible. No exploit is available.
The affected component should be upgraded.
GHSA
GHSA-4qmw-vcgw-w2vh: Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio
ghsa_unreviewed·2022-05-13
CVE-2010-3190 [HIGH] CWE-426 GHSA-4qmw-vcgw-w2vh: Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio
Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C++ 2005 SP1, 2008 SP1, and 2010; and Exchange Server 2010 Service Pack 3, 2013, and 2013 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory during execution of an MFC application such as AtlTraceTool8.exe (aka ATL MFC Trace Tool), as demonstrated by a directory that contains a TRC, cur, rs, rct, or res file, aka "MFC Insecure Library Loading Vulnerability."
Suricata
ET WEB_SPECIFIC_APPS Just For Fun Network Management System (JFFNMS) SQL Injection Attempt -- auth.php user DELETE
suricata·2010-07-30·CVSS 6.8
CVE-2007-3190 [MEDIUM] ET WEB_SPECIFIC_APPS Just For Fun Network Management System (JFFNMS) SQL Injection Attempt -- auth.php user DELETE
ET WEB_SPECIFIC_APPS Just For Fun Network Management System (JFFNMS) SQL Injection Attempt -- auth.php user DELETE
Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Just For Fun Network Management System (JFFNMS) SQL Injection Attempt -- auth.php user DELETE"; flow:established,to_server; http.uri; content:"/auth.php?"; nocase; content:"user="; nocase; content:"DELETE"; nocase; content:"FROM"; nocase; distance:0; reference:cve,CVE-2007-3190; reference:url,www.secunia.com/advisories/25587; classtype:web-application-attack; sid:2005363; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tac
Suricata
ET WEB_SPECIFIC_APPS Just For Fun Network Management System (JFFNMS) SQL Injection Attempt -- auth.php user SELECT
suricata·2010-07-30·CVSS 6.8
CVE-2007-3190 [MEDIUM] ET WEB_SPECIFIC_APPS Just For Fun Network Management System (JFFNMS) SQL Injection Attempt -- auth.php user SELECT
ET WEB_SPECIFIC_APPS Just For Fun Network Management System (JFFNMS) SQL Injection Attempt -- auth.php user SELECT
Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Just For Fun Network Management System (JFFNMS) SQL Injection Attempt -- auth.php user SELECT"; flow:established,to_server; http.uri; content:"/auth.php?"; nocase; content:"user="; nocase; content:"SELECT"; nocase; content:"FROM"; nocase; distance:0; reference:cve,CVE-2007-3190; reference:url,www.secunia.com/advisories/25587; classtype:web-application-attack; sid:2005360; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tac
Suricata
ET WEB_SPECIFIC_APPS Just For Fun Network Management System (JFFNMS) SQL Injection Attempt -- auth.php user UPDATE
suricata·2010-07-30·CVSS 6.8
CVE-2007-3190 [MEDIUM] ET WEB_SPECIFIC_APPS Just For Fun Network Management System (JFFNMS) SQL Injection Attempt -- auth.php user UPDATE
ET WEB_SPECIFIC_APPS Just For Fun Network Management System (JFFNMS) SQL Injection Attempt -- auth.php user UPDATE
Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Just For Fun Network Management System (JFFNMS) SQL Injection Attempt -- auth.php user UPDATE"; flow:established,to_server; http.uri; content:"/auth.php?"; nocase; content:"user="; nocase; content:"UPDATE"; nocase; content:"SET"; nocase; distance:0; reference:cve,CVE-2007-3190; reference:url,www.secunia.com/advisories/25587; classtype:web-application-attack; sid:2005365; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tact
Suricata
ET WEB_SPECIFIC_APPS Just For Fun Network Management System (JFFNMS) SQL Injection Attempt -- auth.php user INSERT
suricata·2010-07-30·CVSS 6.8
CVE-2007-3190 [MEDIUM] ET WEB_SPECIFIC_APPS Just For Fun Network Management System (JFFNMS) SQL Injection Attempt -- auth.php user INSERT
ET WEB_SPECIFIC_APPS Just For Fun Network Management System (JFFNMS) SQL Injection Attempt -- auth.php user INSERT
Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Just For Fun Network Management System (JFFNMS) SQL Injection Attempt -- auth.php user INSERT"; flow:established,to_server; http.uri; content:"/auth.php?"; nocase; content:"user="; nocase; content:"INSERT"; nocase; content:"INTO"; nocase; distance:0; reference:cve,CVE-2007-3190; reference:url,www.secunia.com/advisories/25587; classtype:web-application-attack; sid:2005362; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tac
Suricata
ET WEB_SPECIFIC_APPS Just For Fun Network Management System (JFFNMS) SQL Injection Attempt -- auth.php user ASCII
suricata·2010-07-30·CVSS 6.8
CVE-2007-3190 [MEDIUM] ET WEB_SPECIFIC_APPS Just For Fun Network Management System (JFFNMS) SQL Injection Attempt -- auth.php user ASCII
ET WEB_SPECIFIC_APPS Just For Fun Network Management System (JFFNMS) SQL Injection Attempt -- auth.php user ASCII
Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Just For Fun Network Management System (JFFNMS) SQL Injection Attempt -- auth.php user ASCII"; flow:established,to_server; http.uri; content:"/auth.php?"; nocase; content:"user="; nocase; content:"ASCII("; nocase; content:"SELECT"; nocase; distance:0; reference:cve,CVE-2007-3190; reference:url,www.secunia.com/advisories/25587; classtype:web-application-attack; sid:2005364; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tac
Suricata
ET WEB_SPECIFIC_APPS Just For Fun Network Management System (JFFNMS) SQL Injection Attempt -- auth.php user UNION SELECT
suricata·2010-07-30·CVSS 6.8
CVE-2007-3190 [MEDIUM] ET WEB_SPECIFIC_APPS Just For Fun Network Management System (JFFNMS) SQL Injection Attempt -- auth.php user UNION SELECT
ET WEB_SPECIFIC_APPS Just For Fun Network Management System (JFFNMS) SQL Injection Attempt -- auth.php user UNION SELECT
Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Just For Fun Network Management System (JFFNMS) SQL Injection Attempt -- auth.php user UNION SELECT"; flow:established,to_server; http.uri; content:"/auth.php?"; nocase; content:"user="; nocase; content:"UNION"; nocase; content:"SELECT"; nocase; distance:0; reference:cve,CVE-2007-3190; reference:url,www.secunia.com/advisories/25587; classtype:web-application-attack; sid:2005361; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_
Trendmicro
Patch Tuesday Fixes JET Database Engine, Win32K bugs
blogs_trendmicro·2018-10-10·CVSS 7.8
CVE-2018-8423 [HIGH] Patch Tuesday Fixes JET Database Engine, Win32K bugs
Exploits y vulnerabilidades
## Patch Tuesday Fixes JET Database Engine, Win32K bugs
This month’s Patch Tuesday fixes a JET Database Engine Vulnerability (CVE-2018-8423) that Trend Micro’s Zero Day Initiative (ZDI) disclosed last September together with a proof of concept code.
By: Trend Micro Oct 10, 2018 Read time: ( words)
Save to Folio
This month’s Patch Tuesday fixes a JET Database Engine Vulnerability ( CVE-2018-8423 ) that Trend Micro’s Zero Day Initiative (ZDI) disclosed last September together with a proof of concept code. The vulnerability, which was rated as Important, can allow an attacker to send a specially crafted file containing data in the JET database format. When accessed on a machine, it can allow the JET database engine to execute an out-of-bounds write that would
Trendmicro
Patch Tuesday Fixes JET Database Engine, Win32K bugs
blogs_trendmicro·2018-10-10·CVSS 7.8
CVE-2018-8423 [HIGH] Patch Tuesday Fixes JET Database Engine, Win32K bugs
Exploits & Vulnerabilities
# Patch Tuesday Fixes JET Database Engine, Win32K bugs
This month’s Patch Tuesday fixes a JET Database Engine Vulnerability (CVE-2018-8423) that Trend Micro’s Zero Day Initiative (ZDI) disclosed last September together with a proof of concept code.
By: Trend Micro
2018/10/10
Read time: ( words)
Save to Folio
This month’s Patch Tuesday fixes a JET Database Engine Vulnerability (CVE-2018-8423) that Trend Micro’s Zero Day Initiative (ZDI) disclosed last September together with a proof of concept code. The vulnerability, which was rated as Important, can allow an attacker to send a specially crafted file containing data in the JET database format. When accessed on a machine, it can allow the JET database engine to execute an out-of-bounds write that would then
Trendmicro
Patch Tuesday Fixes JET Database Engine, Win32K bugs
blogs_trendmicro·2018-10-10·CVSS 7.8
CVE-2018-8423 [HIGH] Patch Tuesday Fixes JET Database Engine, Win32K bugs
Exploits & Vulnerabilities
## Patch Tuesday Fixes JET Database Engine, Win32K bugs
This month’s Patch Tuesday fixes a JET Database Engine Vulnerability (CVE-2018-8423) that Trend Micro’s Zero Day Initiative (ZDI) disclosed last September together with a proof of concept code.
By: Trend Micro Oct 10, 2018 Read time: ( words)
Save to Folio
This month’s Patch Tuesday fixes a JET Database Engine Vulnerability ( CVE-2018-8423 ) that Trend Micro’s Zero Day Initiative (ZDI) disclosed last September together with a proof of concept code. The vulnerability, which was rated as Important, can allow an attacker to send a specially crafted file containing data in the JET database format. When accessed on a machine, it can allow the JET database engine to execute an out-of-bounds write that would t
Trendmicro
Patch Tuesday Fixes JET Database Engine, Win32K bugs
blogs_trendmicro·2018-10-10·CVSS 7.8
CVE-2018-8423 [HIGH] Patch Tuesday Fixes JET Database Engine, Win32K bugs
Exploits & Vulnerabilities
## Patch Tuesday Fixes JET Database Engine, Win32K bugs
This month’s Patch Tuesday fixes a JET Database Engine Vulnerability (CVE-2018-8423) that Trend Micro’s Zero Day Initiative (ZDI) disclosed last September together with a proof of concept code.
By: Trend Micro 2018/10/10 Read time: ( words)
Save to Folio
This month’s Patch Tuesday fixes a JET Database Engine Vulnerability ( CVE-2018-8423 ) that Trend Micro’s Zero Day Initiative (ZDI) disclosed last September together with a proof of concept code. The vulnerability, which was rated as Important, can allow an attacker to send a specially crafted file containing data in the JET database format. When accessed on a machine, it can allow the JET database engine to execute an out-of-bounds write that would the
Trendmicro
Patch Tuesday Fixes JET Database Engine, Win32K bugs
blogs_trendmicro·2018-10-10·CVSS 7.8
CVE-2018-8423 [HIGH] Patch Tuesday Fixes JET Database Engine, Win32K bugs
Ausnutzung von Schwachstellen
## Patch Tuesday Fixes JET Database Engine, Win32K bugs
This month’s Patch Tuesday fixes a JET Database Engine Vulnerability (CVE-2018-8423) that Trend Micro’s Zero Day Initiative (ZDI) disclosed last September together with a proof of concept code.
By: Trend Micro Oct 10, 2018 Read time: ( words)
Save to Folio
This month’s Patch Tuesday fixes a JET Database Engine Vulnerability ( CVE-2018-8423 ) that Trend Micro’s Zero Day Initiative (ZDI) disclosed last September together with a proof of concept code. The vulnerability, which was rated as Important, can allow an attacker to send a specially crafted file containing data in the JET database format. When accessed on a machine, it can allow the JET database engine to execute an out-of-bounds write that woul
Talos
Microsoft Patch Tuesday — October 18: Vulnerability disclosures and Snort coverage
blogs_talos·2018-10-09·CVSS 7.5
[HIGH] Microsoft Patch Tuesday — October 18: Vulnerability disclosures and Snort coverage
Microsoft released its monthly security update today, disclosing a variety of vulnerabilities in several of its products. The latest Patch Tuesday covers 49 vulnerabilities, 12 of which are rated "critical," 34 that are rated "important,” two that are considered to have “moderate” severity and one that’s rated as “low.”
The advisories cover bugs in the Chakra scripting engine, the Microsoft Edge internet browser and the Microsoft Office suite of products, among other software.
This update also includes a critical advisory that covers updates to the Microsoft Office suite of products.
Please visit the SNORTⓇ blog here if you would like to know more about the coverage we have for these vulnerabilities.
Critical vulnerabilities
Microsoft has disclosed 12 critical vulnerabilities this mont
Qualys
October 2018 Patch Tuesday – 49 Vulns, Critical browser patches, Hyper-V, Adobe vulns
blogs_qualys·2018-10-09·CVSS 9.3
CVE-2010-3190 [CRITICAL] October 2018 Patch Tuesday – 49 Vulns, Critical browser patches, Hyper-V, Adobe vulns
In this month’s Patch Tuesday release there are 49 vulnerabilities patched with 12 Criticals. Out of the criticals, over half are browser-related, with the rest including Hyper-V and MSXML Parser. Microsoft Exchange covers CVE-2010-3190 which was not identified as in-scope product when originally published, per Microsoft. Microsoft Office covers 9 Important CVEs including Sharepoint and Graphics component.
## Workstation Patches
Browser and Scripting Engine patches should be prioritized for workstation-type devices, meaning any system that is used for email or to access the internet via a browser. This includes multi-user servers that are used as remote desktops for users. There are total 23 CVEs for Windows.
## Hyper-V Hypervisor Escape
Two remote code execution vulnerabilities ( CVE-
Qualys
October 2018 Patch Tuesday – 49 Vulns, Critical browser patches, Hyper-V, Adobe vulns | Qualys
blogs_qualys·2018-10-09·CVSS 9.3
CVE-2010-3190 [CRITICAL] October 2018 Patch Tuesday – 49 Vulns, Critical browser patches, Hyper-V, Adobe vulns | Qualys
In this month’s Patch Tuesday release there are 49 vulnerabilities patched with 12 Criticals. Out of the criticals, over half are browser-related, with the rest including Hyper-V and MSXML Parser. Microsoft Exchange covers CVE-2010-3190 which was not identified as in-scope product when originally published, per Microsoft. Microsoft Office covers 9 Important CVEs including Sharepoint and Graphics component.
### Workstation Patches
Browser and Scripting Engine patches should be prioritized for workstation-type devices, meaning any system that is used for email or to access the internet via a browser. This includes multi-user servers that are used as remote desktops for users. There are total 23 CVEs for Windows.
### Hyper-V Hypervisor Escape
Two remote code execution vulnerabilities (CVE
Talos
Microsoft Patch Tuesday — October 18: Vulnerability disclosures and Snort coverage
blogs_talos·2018-10-09·CVSS 7.5
[HIGH] Microsoft Patch Tuesday — October 18: Vulnerability disclosures and Snort coverage
## Microsoft Patch Tuesday — October 18: Vulnerability disclosures and Snort coverage
Microsoft released its monthly security update today, disclosing a variety of vulnerabilities in several of its products. The latest Patch Tuesday covers 49 vulnerabilities, 12 of which are rated "critical," 34 that are rated "important,” two that are considered to have “moderate” severity and one that’s rated as “low.”
The advisories cover bugs in the Chakra scripting engine, the Microsoft Edge internet browser and the Microsoft Office suite of products, among other software.
This update also includes a critical advisory that covers updates to the Microsoft Office suite of products .
Please visit the SNORTⓇ blog here if you would like to know more about the coverage we have for these vulnerabilities.
Zscaler
Security Advisory – October 09, 2018
blogs_zscaler·CVSS 9.3
[CRITICAL] Security Advisory – October 09, 2018
Provide users with seamless, secure, reliable access to applications and data.
Build and run secure cloud apps, enable zero trust cloud connectivity, and protect workloads from data center to cloud.
Provide zero trust connectivity for IoT and OT devices and secure remote access to OT systems.
Provide zero trust site-to-site connectivity and reliable access to B2B apps for partners.
Industry Report
Zscaler: A Leader in the 2025 Gartner® Magic Quadrant™ for Security Service Edge (SSE)
USE CASES
INDUSTRY & MARKET SOLUTIONS
PARTNERS
TECHNOLOGY PARTNERS
Resource Center
Events & Trainings
Security Research & Services
Tools
Community & Support
CXO REVOLUTIONARIES
Amplifying the voices of real-world digital and zero trust pioneers
Discover how it began and where it’s going
Meet o
http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.htmlhttp://secunia.com/advisories/41212http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/http://www.securityfocus.com/bid/42811http://www.us-cert.gov/cas/techalerts/TA11-102A.htmlhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-025https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12457https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2010-3190https://support.apple.com/HT205221http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.htmlhttp://secunia.com/advisories/41212http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/http://www.securityfocus.com/bid/42811http://www.us-cert.gov/cas/techalerts/TA11-102A.htmlhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-025https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12457https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2010-3190https://support.apple.com/HT205221
2010-08-31
Published