Lucene search

[email protected]CVE-2010-3149

HistoryAug 27, 2010 - 7:00 p.m.

CVE-2010-3149

2010-08-2719:00:18

[email protected]

web.nvd.nist.gov

cve-2010-3149

adobe device central cs5

vulnerability

arbitrary code execution

dll hijacking

nvd

7.6 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.02 Low

EPSS

Percentile

89.0%

JSON

Untrusted search path vulnerability in Adobe Device Central CS5 3.0.0(376), 3.0.1.0 (3027), and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse qtcf.dll that is located in the same folder as an ADCP file.

Affected configurations

NVD

Node

adobedevice_central_cs5Match3.0.0\(376\)

CPENameOperatorVersion
adobe:device_central_cs5adobe device central cs5eq3.0.0\(376\)

CPE	Name	Operator	Version
adobe:device_central_cs5	adobe device central cs5	eq	3.0.0\(376\)

References

osvdb.org/67533

secunia.com/advisories/41118

www.exploit-db.com/exploits/14755/

www.securityfocus.com/archive/1/513323/100/0/threaded

www.vupen.com/english/advisories/2010/2196

7.6 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.02 Low

EPSS

Percentile

89.0%

JSON

Related for CVE-2010-3149

nvd1 prion1 cvelist1