CVE-2010-3155 Untrusted search path vulnerability in Adobe ExtendScript Toolkit (ESTK) CS5 3.5.0.52 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via...
HighCVSS 9.3
EPSS 12.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Untrusted search path vulnerability in Adobe ExtendScript Toolkit (ESTK) CS5 3.5.0.52 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .jsx file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe extendedscript toolkit cs5 | = 3.5.0.52 | No fix listed |
References
- 14785 exploit
- ADV-2010-2213 vdb-entry