CVE-2010-4182 describes an untrusted search path vulnerability in the Data Access Objects (DAO) library (dao360.dll) affecting Microsoft Windows XP, Server 2003, Vista, and Windows 7. This flaw allows local users, and potentially remote attackers, to execute arbitrary code through DLL hijacking by placing a malicious msjet49.dll in the same directory as a file processed by dao360.dll. With a CVSS score of 9.3, this vulnerability is considered critical due to its network-based attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. While no active exploitation, Metasploit modules, or ExploitDB entries are publicly known, and community discussion is minimal, its high FAUCET Risk Score of 96/100 indicates significant potential impact.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:* | ||
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_server_2003:*:-:*:*:*:*:*:* | ||
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_xp:-:sp3:professional:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.