CVE-2010-3152
high · 9.3Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or aires.dll that is located in the same folder as an .ait or .eps file.
9.3
CVSS
16.8%
EPSS (exploit prob.)
97th
EPSS percentile
2010-08-27
Published
AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| adobe | illustrator | 14.0 |
| adobe | illustrator | 15.0.1 |
Check a specific version with /api/v1/cve/match.
References
- http://osvdb.org/67534
- http://secunia.com/advisories/41134
- http://www.adobe.com/support/security/bulletins/apsb10-29.html
- http://www.exploit-db.com/exploits/14773/
- http://www.securityfocus.com/archive/1/513335/100/0/threaded
- http://www.securitytracker.com/id?1024865
- http://www.vupen.com/english/advisories/2010/2198
- http://osvdb.org/67534
- http://secunia.com/advisories/41134
- http://www.adobe.com/support/security/bulletins/apsb10-29.html
- http://www.exploit-db.com/exploits/14773/
- http://www.securityfocus.com/archive/1/513335/100/0/threaded
- http://www.securitytracker.com/id?1024865
- http://www.vupen.com/english/advisories/2010/2198
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2010-3152