Design/Logic Flaw

2010-08-2719:00:00

PRIOn knowledge base

www.prio-n.com

7.9 High

AI Score

Confidence

High

0.02 Low

EPSS

Percentile

89.0%

JSON

Untrusted search path vulnerability in Adobe ExtendScript Toolkit (ESTK) CS5 3.5.0.52 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .jsx file.

CPENameOperatorVersion
extendedscript_toolkit_cs5eq3.5.0.52

CPE	Name	Operator	Version
	extendedscript_toolkit_cs5	eq	3.5.0.52

References

www.vupen.com/english/advisories/2010/2213

www.exploit-db.com/exploits/14785/