CVE-2010-3139

CVE-2010-3139 is an untrusted search path vulnerability in Microsoft Windows' Progman Group Converter (grpconv.exe). This flaw allows local users, and potentially remote attackers, to execute arbitrary code through DLL hijacking by placing a malicious imm.dll in the same directory as a .grp file. The vulnerability carries a critical CVSS score of 9.3, indicating high severity with network-based attacks, medium complexity, and complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog or Hot List, exploit code for DLL hijacking is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.