CVE-2010-3139 EXPLOIT
9.3
HIGH · CVSS 2.0 · EPSS 23.5% (pctl 98)
Patch early
A public exploit exists.
Description
Untrusted search path vulnerability in Microsoft Windows Progman Group Converter (grpconv.exe) allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse imm.dll that is located in the same folder as a .grp file.
Scoring
| CVSS | 9.3 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
| EPSS | 23.5% — more likely to be exploited than 98% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2010-08-27 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| microsoft | windows |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Microsoft Group Convertor - 'imm.dll' DLL Hijacking | 2010-08-25 |
References
- http://osvdb.org/67535
- http://secunia.com/advisories/41136
- http://www.exploit-db.com/exploits/14758
- http://www.vupen.com/english/advisories/2010/2200
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12209
- http://osvdb.org/67535
- http://secunia.com/advisories/41136
- http://www.exploit-db.com/exploits/14758
- http://www.vupen.com/english/advisories/2010/2200
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12209
→ the Explorer · watch your stack · NVD