---
title: "CVE-2010-3914\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2010-3914?format=md
keywords: index, follow
---

# CVE-2010-3914

Publication date 3 November 2010

Last updated 24 July 2024

---

Ubuntu priority

**Medium**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

Untrusted search path vulnerability in VIM Development Group GVim before
7.3.034, and possibly other versions before 7.3.46, allows local users, and
possibly remote attackers, to execute arbitrary code and conduct DLL
hijacking attacks via a Trojan horse User32.dll or other DLL that is
located in the same folder as a .TXT file. NOTE: some of these details are
obtained from third party information.

[Read the notes from the security team](https://ubuntu.com/security/CVE-2010-3914?format=md#notes)

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| vim | 10.10 maverick | Not affected |
| 10.04 LTS lucid | Not affected |
| 9.10 karmic | Not affected |
| 8.04 LTS hardy | Not affected |
| 6.06 LTS dapper | Not affected |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## Notes

---

### [mdeslaur](https://launchpad.net/~mdeslaur)

windows-specific

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3914)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2010-3914)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2010-3914)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2010-3914)

### Other references

* <https://www.cve.org/CVERecord?id=CVE-2010-3914>