CVE-2010-3965

CVE-2010-3965 describes an untrusted search path vulnerability in Windows Media Encoder 9, affecting various Microsoft Windows operating systems including XP, Server 2003, Vista, and Server 2008. This flaw allows local users to achieve privilege escalation by placing a malicious DLL in the same directory as a Windows Media Profile (PRX) file. With a CVSS score of 9.3, this vulnerability is considered critical due to its network-based attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity and EPSS score, there is no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, or significant community discussion or media coverage.