CVE-2010-3147

Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a Trojan horse wab32res.dll file in the current working directory, as demonstrated by a directory that contains a Windows Address Book (WAB), VCF (aka vCard), or P7C file, aka "Insecure Library Loading Vulnerability." NOTE: the codebase for this product may overlap the codebase for the product referenced in CVE-2010-3143.

• http://secunia.com/advisories/41050Vendor Advisory
• http://www.attackvector.org/new-dll-hijacking-exploits-many/Exploit
• http://www.exploit-db.com/exploits/14745/Exploit
• http://www.securitytracker.com/id?1024878
• http://www.us-cert.gov/cas/techalerts/TA10-348A.htmlUS Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-096
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12352
• http://secunia.com/advisories/41050Vendor Advisory
• http://www.attackvector.org/new-dll-hijacking-exploits-many/Exploit
• http://www.exploit-db.com/exploits/14745/Exploit
• http://www.securitytracker.com/id?1024878
• http://www.us-cert.gov/cas/techalerts/TA10-348A.htmlUS Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-096
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12352

Published

Aug 27, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-3141Untrusted search path vulnerability in Microsoft PowerPoint …
• CVE-2010-3142Untrusted search path vulnerability in Microsoft Office Powe…
• CVE-2010-3143Untrusted search path vulnerability in Microsoft Windows Con…
• CVE-2010-3144Untrusted search path vulnerability in the Internet Connecti…
• CVE-2010-3145Untrusted search path vulnerability in the BitLocker Drive E…
• CVE-2010-3146Multiple untrusted search path vulnerabilities in Microsoft …
• CVE-2010-3148Untrusted search path vulnerability in Microsoft Visio 2003 …
• CVE-2010-3149Untrusted search path vulnerability in Adobe Device Central …
• CVE-2010-3150Untrusted search path vulnerability in Adobe Premier Pro CS4…
• CVE-2010-3151Untrusted search path vulnerability in Adobe On Location CS4…
• CVE-2010-3152Untrusted search path vulnerability in Adobe Illustrator CS4…
• CVE-2010-3153Untrusted search path vulnerability in Adobe InDesign CS4 6.…