peter bassill · operator
$ cve CVE-2010-3135 JSON

CVE-2010-3135 EXPLOIT

9.3
HIGH · CVSS 2.0 · EPSS 8.2% (pctl 95)

Patch early

A public exploit exists.

Description

Untrusted search path vulnerability in Cisco Packet Tracer 5.2 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll that is located in the same folder as a .pkt or .pkz file.

Scoring

CVSS9.3 (HIGH, v2.0)
VectorAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS8.24% — more likely to be exploited than 95% of all CVEs
On CISA KEVno
Public exploityes
Published2010-08-26
Last modified2026-06-16

Affected (1)

VendorProduct
ciscopacket tracer

Public exploits

SourceTitleDate
exploit-dbCisco Packet Tracer 5.2 - 'wintab32.dll' DLL Hijacking2010-08-25

References

→ the Explorer  ·  watch your stack  ·  NVD