CVE:CVE-2010-3138
CNNVD:CNNVD-201008-343
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。
在BS.Player，Media Player Classic和其他产品中使用的Microsoft Windows中的Indeo filter (iac25_32.ax)中存在非信任搜索路径漏洞。本地用户和远程攻击者可以借助与AVI，.mka，.ra，.ram文件在同一文件夹下的iacenc.dll木马执行任意代码和DLL劫持攻击。
solution:Upgrade microsoft windows_media_player to a higher version than *; Upgrade microsoft windows_xp to a higher version than *:sp3,and avoid the version *:sp3; Upgrade bsplayer bs.player to a higher version than *