CVE-2010-3134

CVE-2010-3134 describes an untrusted search path vulnerability in Google Earth version 5.1.3535.3218. This flaw allows local users, and potentially remote attackers, to execute arbitrary code through a DLL hijacking attack. Specifically, a malicious quserex.dll file placed in the same directory as a .kmz file can be loaded and executed. The vulnerability carries a critical CVSS score of 9.3, indicating high severity with network-based attacks, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, public exploit code exists on ExploitDB, though there is no evidence of active exploitation or significant community discussion.