Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-3145

Untrusted search path vulnerability in the BitLocker Drive Encryption API, as used in sdclt.exe in Backup Manager in Microsoft Windows Vista SP1 and SP2, allows local users to gain privileges via a Trojan horse fveapi.dll file in the current working directory, as demonstrated by a directory that contains a Windows Backup Catalog (.wbcat) file, aka "Backup Manager Insecure Library Loading Vulnerability."

Published

2010-08-27T19:00:02.160

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
NVD-CWE-Other

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	microsoft	windows_vista	*	Yes
Operating System	microsoft	windows_vista	*	Yes

References

http://www.exploit-db.com/exploits/14751/ Exploit ([email protected])
http://www.securitytracker.com/id?1024948 ([email protected])
http://www.us-cert.gov/cas/techalerts/TA11-011A.html US Government Resource ([email protected])
http://www.vupen.com/english/advisories/2011/0074 Vendor Advisory ([email protected])
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-001 ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12273 ([email protected])
http://www.exploit-db.com/exploits/14751/ Exploit (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1024948 (af854a3a-2127-422b-91ae-364da2661108)
http://www.us-cert.gov/cas/techalerts/TA11-011A.html US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2011/0074 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-001 (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12273 (af854a3a-2127-422b-91ae-364da2661108)