VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 17, 2012· Updated Jun 16, 2026

CVE-2010-5082

CVE-2010-5082

Description

Untrusted search path vulnerability in colorcpl.exe 6.0.6000.16386 in the Color Control Panel in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges via a Trojan horse sti.dll file in the current working directory, as demonstrated by a directory that contains a .camp, .cdmp, .gmmp, .icc, or .icm file, aka "Color Control Panel Insecure Library Loading Vulnerability."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Microsoft/Windows Server 20082 versions
    cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
  • Microsoft/Color Control Panelllm-create
    Range: = 6.0.6000.16386 (colorcpl.exe) on Windows Server 2008 SP2, R2, R2 SP1

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.