CVE-2010-3914

CVE-2010-3914 describes an untrusted search path vulnerability in VIM Development Group GVim, specifically versions before 7.3.034 and potentially others before 7.3.46. This flaw allows local users, and possibly remote attackers, to execute arbitrary code and perform DLL hijacking by placing a malicious DLL (e.g., User32.dll) in the same directory as a .TXT file. The vulnerability carries a critical CVSS score of 9.3, indicating a network-based attack with medium complexity, leading to complete compromise of confidentiality, integrity, and availability. This means an attacker could gain full control over the affected system. Despite its high severity, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are also minimal, suggesting it has not garnered significant attention.