CVE-2010-3145

Untrusted search path vulnerability in the BitLocker Drive Encryption API, as used in sdclt.exe in Backup Manager in Microsoft Windows Vista SP1 and SP2, allows local users to gain privileges via a Trojan horse fveapi.dll file in the current working directory, as demonstrated by a directory that contains a Windows Backup Catalog (.wbcat) file, aka "Backup Manager Insecure Library Loading Vulnerability."

• http://www.exploit-db.com/exploits/14751/Exploit
• http://www.securitytracker.com/id?1024948
• http://www.us-cert.gov/cas/techalerts/TA11-011A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2011/0074Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-001
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12273
• http://www.exploit-db.com/exploits/14751/Exploit
• http://www.securitytracker.com/id?1024948
• http://www.us-cert.gov/cas/techalerts/TA11-011A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2011/0074Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-001
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12273

Published

Aug 27, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-3139Untrusted search path vulnerability in Microsoft Windows Pro…
• CVE-2010-3140Untrusted search path vulnerability in Microsoft Windows Int…
• CVE-2010-3141Untrusted search path vulnerability in Microsoft PowerPoint …
• CVE-2010-3142Untrusted search path vulnerability in Microsoft Office Powe…
• CVE-2010-3143Untrusted search path vulnerability in Microsoft Windows Con…
• CVE-2010-3144Untrusted search path vulnerability in the Internet Connecti…
• CVE-2010-3146Multiple untrusted search path vulnerabilities in Microsoft …
• CVE-2010-3147Untrusted search path vulnerability in wab.exe 6.00.2900.551…
• CVE-2010-3148Untrusted search path vulnerability in Microsoft Visio 2003 …
• CVE-2010-3149Untrusted search path vulnerability in Adobe Device Central …
• CVE-2010-3150Untrusted search path vulnerability in Adobe Premier Pro CS4…
• CVE-2010-3151Untrusted search path vulnerability in Adobe On Location CS4…