PatchTheCVECVE-2010-3147: Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP
CVE-2010-3147 is a high-severity flaw (CVSS 9.3) affecting outlook express, windows 2003 server, windows 7. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a Trojan horse wab32res.dll file in the current working directory, as demonstrated by a directory that contains a Windows Address Book (WAB), VCF (aka vCard), or P7C file, aka "Ins
Why this priority
- Critical severity
- EPSS top 3%: very likely to be exploited
- Public exploit reference
- On your watchlist
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 9.3 (High) |
| EPSS exploit chance | 18.7% (top 3%) |
| CISA exploited list | No |
| Published | 2010-08-27 |
| Last modified | 2026-06-16 |
Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Public exploits and detection
Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.
- Exploit-DB: Microsoft Address Book 6.00.2900.5512 - 'wab32res.dll' DLL Hijacking
- Exploit-DB: Microsoft Windows - Contacts 'wab32res.dll' DLL Hijacking
- Exploit-DB: Microsoft Windows 7 - 'wab32res.dll wab.exe' DLL Hijacking
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2010-3147?
outlook express: downgrade or apply the listed mitigation; windows 2003 server: mitigate or apply the listed mitigation; windows 7: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2010-3147 being exploited?
CVE-2010-3147 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2010-3147 affect?
CVE-2010-3147 affects outlook express, windows 2003 server, windows 7. Severity is high (CVSS 9.3). Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local
How urgent is CVE-2010-3147?
Priority 67/100. Critical severity; EPSS top 3%: very likely to be exploited; Public exploit reference; On your watchlist
Software pages
Windows vulnerabilities · Windows Server vulnerabilities · Outlook vulnerabilities
Related CVEs
- CVE-2010-0816 HIGH 9.3 DOWNGRADE MITIGATE Integer overflow in inetcomm.dll in Microsoft Outlook Express 5.5 SP2, 6, and 6 SP1; Windows Live Mail on Wind
- CVE-2008-5424 MEDIUM 4.3 DOWNGRADE The MimeOleClearDirtyTree function in InetComm.dll in Microsoft Outlook Express 6.00.2900.5512 does not proper
- CVE-2008-1448 HIGH 7.1 DOWNGRADE MITIGATE The MHTML protocol handler in a component of Microsoft Outlook Express 5.5 SP2 and 6 through SP1, and Windows
- CVE-2007-4040 HIGH 8.8 MITIGATE MITIGATE Argument injection vulnerability involving Microsoft Outlook and Outlook Express, when certain URIs are regist
- CVE-2007-3897 HIGH 9.3 UPGRADE MITIGATE Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remo