CVE-2010-3914

Published: Nov 3, 2010Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Untrusted search path vulnerability in VIM Development Group GVim before 7.3.034, and possibly other versions before 7.3.46, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse User32.dll or other DLL that is located in the same folder as a .TXT file. NOTE: some of these details are obtained from third party information.

Affected (33)

Products: Vim: Gvim

Vim

1 product

Gvim

Configuration A

33 vulnerable

Vulnerable Software	Affected Versions
Vim Gvim	Up to 7.3.033
Vim Gvim	Version 7.3.010
Vim Gvim	Version 7.3.011
Vim Gvim	Version 7.3.012
Vim Gvim	Version 7.3.013
Vim Gvim	Version 7.3.014
Vim Gvim	Version 7.3.015
Vim Gvim	Version 7.3.016
Vim Gvim	Version 7.3.017
Vim Gvim	Version 7.3.018
Vim Gvim	Version 7.3.019
Vim Gvim	Version 7.3.01
Vim Gvim	Version 7.3.020
Vim Gvim	Version 7.3.021
Vim Gvim	Version 7.3.022
Vim Gvim	Version 7.3.023
Vim Gvim	Version 7.3.024
Vim Gvim	Version 7.3.025
Vim Gvim	Version 7.3.026
Vim Gvim	Version 7.3.027
Vim Gvim	Version 7.3.028
Vim Gvim	Version 7.3.029
Vim Gvim	Version 7.3.02
Vim Gvim	Version 7.3.030
Vim Gvim	Version 7.3.031
Vim Gvim	Version 7.3.032
Vim Gvim	Version 7.3.03
Vim Gvim	Version 7.3.04
Vim Gvim	Version 7.3.05
Vim Gvim	Version 7.3.06
Vim Gvim	Version 7.3.07
Vim Gvim	Version 7.3.08
Vim Gvim	Version 7.3.09