CVE-2010-3151
Untrusted search path vulnerability in Adobe On Location CS4 Build 315 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ibfs32.dll that is located in the same folder as an…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 15.1%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
Untrusted search path vulnerability in Adobe On Location CS4 Build 315 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ibfs32.dll that is located in the same folder as an OLPROJ file.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 15.08% probability · 97th percentile
- CISA KEV
- Not listed
- Affected
- adobe/onlocation cs4
- Source
- cve@mitre.org
References
- http://www.exploit-db.com/exploits/14772/Exploit
- http://www.securityfocus.com/archive/1/513332/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64445
- http://www.exploit-db.com/exploits/14772/Exploit
- http://www.securityfocus.com/archive/1/513332/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64445
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.