Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-3140. PoCs published by ALPdaemon.
AI-analyzed exploit summary This exploit leverages DLL hijacking in Windows Internet Communication Settings by placing a malicious schannel.dll in the same directory as an .isp file. When the .isp file is opened, the malicious DLL executes arbitrary code (calc.exe in this case).
Description
Untrusted search path vulnerability in Microsoft Windows Internet Communication Settings on Windows XP SP3 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse schannel.dll that is located in the same folder as an ISP file.
Exploits (1)
This exploit leverages DLL hijacking in Windows Internet Communication Settings by placing a malicious schannel.dll in the same directory as an .isp file. When the .isp file is opened, the malicious DLL executes arbitrary code (calc.exe in this case).