CVE-2010-3199

CVE-2010-3199 is an untrusted search path vulnerability affecting TortoiseSVN versions 1.6.10 and earlier. It allows local users, and potentially remote attackers, to execute arbitrary code through DLL hijacking by placing a malicious dwmapi.dll in the same directory as a file processed by TortoiseSVN, provided a non-default file association exists. This vulnerability carries a critical CVSS score of 9.3, indicating a network-based attack with medium complexity but complete compromise of confidentiality, integrity, and availability. The FAUCET Risk Score is 77/100, highlighting its significant potential impact. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei. The CVE has received minimal community discussion and media coverage, suggesting low public awareness despite its high severity.