CVE-2010-3976 Untrusted search path vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows allows local users, and possibly remote attackers, to execute arbitrary code and condu...
HighCVSS 9.3
EPSS 9.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Flash Player.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | <= 9.0.277.0 | No fix listed |
| Adobe flash player | = 9.0.16 | No fix listed |
| Adobe flash player | = 9.0.18d60 | No fix listed |
| Adobe flash player | = 9.0.20 | No fix listed |
| Adobe flash player | = 9.0.20.0 | No fix listed |
| Adobe flash player | = 9.0.28 | No fix listed |
| Adobe flash player | = 9.0.28.0 | No fix listed |
| Adobe flash player | = 9.0.31 | No fix listed |
| Adobe flash player | = 9.0.31.0 | No fix listed |
| Adobe flash player | = 9.0.45.0 | No fix listed |
| Adobe flash player | = 9.0.47.0 | No fix listed |
| Adobe flash player | = 9.0.48.0 | No fix listed |
| Adobe flash player | = 9.0.112.0 | No fix listed |
| Adobe flash player | = 9.0.114.0 | No fix listed |
| Adobe flash player | = 9.0.115.0 | No fix listed |
| Adobe flash player | = 9.0.124.0 | No fix listed |
| Adobe flash player | = 9.0.125.0 | No fix listed |
| Adobe flash player | = 9.0.151.0 | No fix listed |
| Adobe flash player | = 9.0.152.0 | No fix listed |
| Adobe flash player | = 9.0.155.0 | No fix listed |
| Adobe flash player | = 9.0.159.0 | No fix listed |
| Adobe flash player | = 9.0.246.0 | No fix listed |
| Adobe flash player | = 9.0.260.0 | No fix listed |
| Adobe flash player | = 9.0.262.0 | No fix listed |
| Adobe flash player | <= 10.1.92.10 | No fix listed |
Show 16 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | = 10.0.0.584 | No fix listed |
| Adobe flash player | = 10.0.12.10 | No fix listed |
| Adobe flash player | = 10.0.12.36 | No fix listed |
| Adobe flash player | = 10.0.15.3 | No fix listed |
| Adobe flash player | = 10.0.22.87 | No fix listed |
| Adobe flash player | = 10.0.32.18 | No fix listed |
| Adobe flash player | = 10.0.42.34 | No fix listed |
| Adobe flash player | = 10.0.45.2 | No fix listed |
| Adobe flash player | = 10.1.52.14.1 | No fix listed |
| Adobe flash player | = 10.1.52.15 | No fix listed |
| Adobe flash player | = 10.1.53.64 | No fix listed |
| Adobe flash player | = 10.1.82.76 | No fix listed |
| Adobe flash player | = 10.1.85.3 | No fix listed |
| Adobe flash player | = 10.1.92.8 | No fix listed |
| Adobe flash player | = 10.1.95.1 | No fix listed |
| Adobe flash player | = 10.1.95.2 | No fix listed |
References
- core.yehg.net
- APPLE-SA-2010-11-10-1 vendor-advisory
- SUSE-SA:2010:055 vendor-advisory
- SSRT100428 vendor-advisory
- 43026 third-party-advisory vendor-advisory
- GLSA-201101-09 vendor-advisory
- support.apple.com vendor-advisory
- www.acrossecurity.com
- www.adobe.com vendor-advisory
- 20100910 Adobe Flash Player IE version 10.1.x Insecure DLL Hijacking Vulnerability (dwmapi.dll) exploit mailing-list
- 20101105 ASPR #2010-11-05-01: Remote Binary Planting in Adobe Flash Player mailing-list
- 44671 vdb-entry
- ADV-2010-2903 vdb-entry vendor-advisory
- ADV-2011-0192 vdb-entry vendor-advisory
- oval:org.mitre.oval:def:6926 signature vdb-entry