CVE:CVE-2010-3914
CNNVD:CNNVD-201011-020
VIM Development Group Gvim 7.3.034之前也可能在7.3.46之前的其他版本中存在非信任搜索路径漏洞。本地用户和其它可能的远程攻击者可以借助位于非信任搜索路径下的带.TXT后缀的User32.dll或其他DLL Trojan木马执行任意代码以及进行DLL劫持攻击。
solution:Upgrade vim gvim to a higher version than 7.3.033,7.3.01,7.3.02,7.3.03,7.3.04,7.3.05,7.3.06,7.3.07,7.3.08,7.3.09,7.3.010,7.3.011,7.3.012,7.3.013,7.3.014,7.3.015,7.3.016,7.3.017,7.3.018,7.3.019,7.3.020,7.3.021,7.3.022,7.3.023,7.3.024,7.3.025,7.3.026,7.3.027,7.3.028,7.3.029,7.3.030,7.3.031,7.3.032,and avoid the version (,7.3.033],7.3.01,7.3.02,7.3.03,7.3.04,7.3.05,7.3.06,7.3.07,7.3.08,7.3.09,7.3.010,7.3.011,7.3.012,7.3.013,7.3.014,7.3.015,7.3.016,7.3.017,7.3.018,7.3.019,7.3.020,7.3.021,7.3.022,7.3.023,7.3.024,7.3.025,7.3.026,7.3.027,7.3.028,7.3.029,7.3.030,7.3.031,7.3.032