CVE-2010-3402

2022-10-0316:20:56

mitre

www.cve.org

idm computer solutions

ultraedit

vulnerability

arbitrary code execution

dll hijacking

untrusted search path

7.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.3%

JSON

Untrusted search path vulnerability in IDM Computer Solutions UltraEdit 16.20.0.1009, 16.10.0.1036, and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a bin, cpp, css, c, dat, hpp, html, h, ini, java, log, mak, php, prj, txt, or xml file.