{ "schema_version": "1.4.0", "id": "GHSA-86m9-jwxx-2r6p", "modified": "2022-05-17T01:04:36Z", "published": "2022-05-17T01:04:36Z", "aliases": [ "CVE-2010-3126" ], "details": "Untrusted search path vulnerability in avast! Free Antivirus version 5.0.594 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse mfc90loc.dll that is located in the same folder as an avast license (.avastlic) file.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3126" }, { "type": "WEB", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7193" }, { "type": "WEB", "url": "http://secunia.com/advisories/41109" }, { "type": "WEB", "url": "http://www.exploit-db.com/exploits/14743" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2010/2175" } ], "database_specific": { "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2010-08-26T18:36:00Z" } }