CVE-2010-3151 Untrusted search path vulnerability in Adobe On Location CS4 Build 315 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse...
HighCVSS 9.3
EPSS 15.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Untrusted search path vulnerability in Adobe On Location CS4 Build 315 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ibfs32.dll that is located in the same folder as an OLPROJ file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe onlocation cs4 | = 4.0.1 | No fix listed |
| Adobe onlocation cs4 | = 4.0.2 | No fix listed |
| Adobe onlocation cs4 | = 4.0.3 | No fix listed |
References
- 14772 exploit
- 20100825 Adobe On Location CS4 DLL Hijacking Exploit (ibfs32.dll) mailing-list
- adobe-ibfs32-code-exec(64445) vdb-entry