CVE-2010-3152

EPSS 16.8%

Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or aires.dll that is located in the same folder as an .ait or .eps file.

Produtos afetados

n/a · n/a

PoCs públicas encontradas — 2

cve_referencewww.exploit-db.com/exploits/14773/não verificado exploitdbwww.exploit-db.com/exploits/14773não verificado

⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://osvdb.org/67534 http://secunia.com/advisories/41134 http://www.adobe.com/support/security/bulletins/apsb10-29.html http://www.exploit-db.com/exploits/14773/http://www.securityfocus.com/archive/1/513335/100/0/threaded http://www.securitytracker.com/id?1024865 http://www.vupen.com/english/advisories/2010/2198