CVE-2010-3127

2010-08-2618:36:35

[email protected]

web.nvd.nist.gov

adobe

photoshop

vulnerability

security

cve-2010-3127

dll

hijacking

nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.018 Low

EPSS

Percentile

88.1%

JSON

Untrusted search path vulnerability in Adobe PhotoShop CS2 through CS5 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or Wintab32.dll that is located in the same folder as a PSD or other file that is processed by PhotoShop. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD

Node

adobephotoshopMatch9.0

adobephotoshopMatch9.0.1

adobephotoshopMatch9.0.2

adobephotoshopMatch10.0

adobephotoshopMatch11.0

adobephotoshopMatch12.0

CPENameOperatorVersion
adobe:photoshopadobe photoshopeq9.0
adobe:photoshopadobe photoshopeq9.0.1
adobe:photoshopadobe photoshopeq9.0.2
adobe:photoshopadobe photoshopeq10.0
adobe:photoshopadobe photoshopeq11.0
adobe:photoshopadobe photoshopeq12.0

CPE	Name	Operator	Version
adobe:photoshop	adobe photoshop	eq	9.0
adobe:photoshop	adobe photoshop	eq	9.0.1
adobe:photoshop	adobe photoshop	eq	9.0.2
adobe:photoshop	adobe photoshop	eq	10.0
adobe:photoshop	adobe photoshop	eq	11.0
adobe:photoshop	adobe photoshop	eq	12.0