CVE-2010-3152

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 17%

from disclosure to weapon0 days

Published on NVDAug 27

1st PoCAug 25

exploitation probability

17%top 3% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or aires.dll that is located in the same folder as an .ait or .eps file.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/14773/unverified exploitdbwww.exploit-db.com/exploits/14773unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://osvdb.org/67534 http://secunia.com/advisories/41134 http://www.adobe.com/support/security/bulletins/apsb10-29.html http://www.exploit-db.com/exploits/14773/http://www.securityfocus.com/archive/1/513335/100/0/threaded http://www.securitytracker.com/id?1024865 http://www.vupen.com/english/advisories/2010/2198