CVE-2010-3148

CVE-2010-3148 describes an untrusted search path vulnerability in Microsoft Visio 2003 SP3, allowing local privilege escalation. An attacker can exploit this by placing a malicious mfc71enu.dll file in the same directory as a Visio document (.vsd, .vdx, .vst, or .vtx). This vulnerability carries a critical CVSS score of 9.3, indicating high severity with complete compromise of confidentiality, integrity, and availability. While not actively exploited in the wild (no KEV entry), public exploit code exists on ExploitDB, and its EPSS score suggests a low likelihood of exploitation. There is no significant community discussion or media coverage surrounding this decade-old vulnerability.