Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-3148. PoCs published by Beenu Arora.
AI-analyzed exploit summary This exploit leverages DLL hijacking in Microsoft Visio 2003 by renaming a malicious DLL to 'mfc71enu.dll' and placing it in the same directory as a .vtx file. When Visio loads the file, it executes the malicious DLL, resulting in arbitrary code execution (calc.exe in this PoC).
Description
Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .vsd, .vdx, .vst, or .vtx file, aka "Microsoft Visio Insecure Library Loading Vulnerability."
Exploits (1)
This exploit leverages DLL hijacking in Microsoft Visio 2003 by renaming a malicious DLL to 'mfc71enu.dll' and placing it in the same directory as a .vtx file. When Visio loads the file, it executes the malicious DLL, resulting in arbitrary code execution (calc.exe in this PoC).