CVE:CVE-2010-3140
CNNVD:CNNVD-201008-345
基于Windows XP SP3平台的Microsoft Windows Internet Communication Settings中存在非信任搜索路径漏洞。本地用户和远程攻击者可以借助与ISP文件在同一文件夹下的schannel.dll木马执行任意代码和DLL劫持攻击。
solution:Upgrade microsoft windows_xp to a higher version than *:sp3,and avoid the version *:sp3