CVE-2010-3152
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 17%
from disclosure to weaponsame day
Published on NVDAug 27
1st PoCAug 25
Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or aires.dll that is located in the same folder as an .ait or .eps file.
Affected products
n/a · n/apublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/14773unverifiedcve_referencewww.exploit-db.com/exploits/14773/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://osvdb.org/67534http://secunia.com/advisories/41134http://www.adobe.com/support/security/bulletins/apsb10-29.htmlhttp://www.exploit-db.com/exploits/14773/http://www.securityfocus.com/archive/1/513335/100/0/threadedhttp://www.securitytracker.com/id?1024865http://www.vupen.com/english/advisories/2010/2198