CVE Database
/

CVE-2010-3145

Back to search

CVE-2010-3145

Published: Aug 27, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

Untrusted search path vulnerability in the BitLocker Drive Encryption API, as used in sdclt.exe in Backup Manager in Microsoft Windows Vista SP1 and SP2, allows local users to gain privileges via a Trojan horse fveapi.dll file in the current working directory, as demonstrated by a directory that contains a Windows Backup Catalog (.wbcat) file, aka "Backup Manager Insecure Library Loading Vulnerability."

VendorProductVersions

n/a

n/a

affected
n/a

References

14751
exploit
x_refsource_EXPLOIT-DB
ADV-2011-0074
vdb-entry
x_refsource_VUPEN
1024948
vdb-entry
x_refsource_SECTRACK
MS11-001
vendor-advisory
x_refsource_MS
TA11-011A
third-party-advisory
x_refsource_CERT
oval:org.mitre.oval:def:12273
vdb-entry
signature
x_refsource_OVAL

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now