CVE-2010-3126

Published: Aug 26, 2010Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Untrusted search path vulnerability in avast! Free Antivirus version 5.0.594 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse mfc90loc.dll that is located in the same folder as an avast license (.avastlic) file.

Affected (1)

Products: Avast: Avast Antivirus Free

1 product

Avast Antivirus Free

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Avast Avast Antivirus Free	Up to 5.0.594

References (8)

http://secunia.com/advisories/41109

Source: cve@mitre.org

Vendor Advisory

http://www.exploit-db.com/exploits/14743

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2010/2175

Source: cve@mitre.org

Vendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7193

Source: cve@mitre.org

http://secunia.com/advisories/41109

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.exploit-db.com/exploits/14743

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.vupen.com/english/advisories/2010/2175

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7193

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.