This application requires Javascript for optimal performance.

MS.Windows.Groove.Dll.Hijacking

Release Date

Sep 26, 2011

Severity

high

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Description

This indicates an attack attempt against a DLL Hijacking vulnerability in Microsoft Groove.

The vulnerability exists because of the way that Windows Groove handles the loading of DLL files. An attacker who successfully exploits this vulnerability could take complete control of an affected system.

Affected Products

Microsoft Groove 2007 Service Pack 2

Recommended Actions

Microsoft Groove 2007 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?FamilyId=3981ab53-1082-4155-9000-11d8a976ff33

Coverage

IPS
VCM

Common Vulnerabilities and Exposures (CVE)

CVE-2010-3146

Reference/s

http://technet.microsoft.com/en-us/security/bulletin/MS11-016.mspx (MS-ID)
http://www.exploit-db.com/exploits/14746/

Reference: VID-29271