What’s Vulnerable › Vulnerabilities

CVE-2010-3145

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 10.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2010-08-27 · updated 2026-06-16

Description

Untrusted search path vulnerability in the BitLocker Drive Encryption API, as used in sdclt.exe in Backup Manager in Microsoft Windows Vista SP1 and SP2, allows local users to gain privileges via a Trojan horse fveapi.dll file in the current working directory, as demonstrated by a directory that contains a Windows Backup Catalog (.wbcat) file, aka "Backup Manager Insecure Library Loading Vulnerability."

Affected products

• Microsoft Windows Vista: all versions

References

• http://www.exploit-db.com/exploits/14751/
• http://www.securitytracker.com/id?1024948
• http://www.us-cert.gov/cas/techalerts/TA11-011A.html
• http://www.vupen.com/english/advisories/2011/0074
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-001
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12273
• http://www.exploit-db.com/exploits/14751/
• http://www.securitytracker.com/id?1024948
• http://www.us-cert.gov/cas/techalerts/TA11-011A.html
• http://www.vupen.com/english/advisories/2011/0074
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-001
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12273

Get alerted when CVE-2010-3145 or the next vulnerability affects your stack