39 matches found
CVE-2010-3154
CVE-2010-3154 affects Adobe Extension Manager CS5 (version 5.0.298). The vulnerability arises from an untrusted search path where a Trojan horse dwmapi.dll placed in the same folder as a .mxi or .mxp file can enable DLL hijacking, allowing local users and potentially remote attackers to execute a...
CVE-2010-3149
Untrusted search path vulnerability in Adobe Device Central CS5 3.0.0376, 3.0.1.0 3027, and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse qtcf.dll that is located in the same folder as an...
CVE-2010-3149: Undefined Security Weakness
Untrusted search path vulnerability in Adobe Device Central CS5 3.0.0376, 3.0.1.0 3027, and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse qtcf.dll that is located in the same folder as an...
CVE-2010-3155: Undefined Security Weakness
Untrusted search path vulnerability in Adobe ExtendScript Toolkit ESTK CS5 3.5.0.52 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .jsx file...
CVE-2010-3152: Undefined Security Weakness
Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or aires.dll that is located in the...
CVE-2010-3154: Undefined Security Weakness
Untrusted search path vulnerability in Adobe Extension Manager CS5 5.0.298 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .mxi or .mxp file...
CVE-2010-3132
Untrusted search path vulnerability in Adobe Dreamweaver CS5 11.0 build 4916, build 4909, and probably other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 mfc90loc.dll or 2 dwmapi.dll that is located i...
CVE-2010-3132
Affected software: Adobe Dreamweaver CS5 (11.0) build 4916 and 4909, with likely other versions. Vulnerability type / root cause: Untrusted search path leading to DLL hijacking, where a Trojan horse DLL (mfc90loc.dll or dwmapi.dll) placed in the same folder as a file that automatically launches D...
Adobe ExtendedScript Toolkit CS5 3.5.0.52 DLL Hijacking Exploit
/ Adobe ExtendedScript Toolkit CS5 v3.5.0.52 dwmapi.dll DLL Hijacking Exploit Vendor: Adobe Systems Inc. Product Web Page: http://www.adobe.com Affected Version: CS5 v3.5.0.52 ExtendScript 4.1.23 ScriptUI 5.1.37 Summary: The ExtendScript Toolkit ESTK 3.5.0 is a scripting utility included with...
Adobe Device Central CS5 v3.0.1.0 (dwmapi.dll) DLL Hijacking Exploit
Summary Adobe® Device Central CS5 software simplifies the production of innovative and compelling content for mobile phones and consumer electronics devices. Adobe Device Central CS5 now offers support for HTML and the latest versions of Adobe Flash® Player software. Description Adobe Device...
Adobe Device Central CS5 DLL Hijacking Exploit (qtcf.dll)
/ Exploit Title: Adobe Device Central CS5 DLL Hijacking Exploit qtcf.dll Date: August 24, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: Latest CS5 v3.0.0376 Tested on: Windows 7 x64 Ultimate Vulnerable extensions: .adcp Greetz: Astalavista, OffSEC, Exploit-DB / include...
CVE-2010-3132: Undefined Security Weakness
Untrusted search path vulnerability in Adobe Dreamweaver CS5 11.0 build 4916, build 4909, and probably other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 mfc90loc.dll or 2 dwmapi.dll that is located i...
Adobe ExtendedScript Toolkit CS5 v3.5.0.52 (dwmapi.dll) DLL Hijacking Exploit
Summary The ExtendScript Toolkit ESTK 3.5.0 is a scripting utility included with Adobe® Creative Suite CS5 and other Adobe applications. The ESTK is used for creating, editing, and debugging JavaScript to be used for scripting Adobe applications. Description Adobe ExtendScript Toolkit CS5 suffers...
CVE-2010-3127: Undefined Security Weakness
Untrusted search path vulnerability in Adobe PhotoShop CS2 through CS5 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or Wintab32.dll that is located in the same folder as a PSD or other file that is...
Adobe Dreamweaver CS5 11.0 build 4909 - mfc90loc.dll DLL Hijacking
Adobe Dreamweaver CS5 11.0 build 4909 - mfc90loc.dll DLL Hijacking / Exploit Title: Adobe Dreamweaver CS5 DLL Hijacking Exploit mfc90loc.dll Date: 25/08/2010 Author: Bruno Filipe diwr http://digitalacropolis.us Software Link: http://www.adobe.com Version: int main WinExec"calc", SWNORMAL; exit0;...
Adobe Device Central CS5 - qtcf.dll DLL Hijacking
Adobe Device Central CS5 - qtcf.dll DLL Hijacking / Exploit Title: Adobe Device Central CS5 DLL Hijacking Exploit qtcf.dll Date: August 24, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: Latest CS5 v3.0.0376 Tested on: Windows 7 x64 Ultimate Vulnerable extensions: .adcp...
Adobe Extension Manager CS5 5.0.298 - 'dwmapi.dll' DLL Hijacking
/ Adobe Extension Manager CS5 v5.0.298 dwmapi.dll DLL Hijacking Exploit Vendor: Adobe Systems Inc. Product Web Page: http://www.adobe.com Affected Version: CS5 v5.0.298 Summary: Easily install new extensions and manage the ones you already have with the Adobe Extension Manager. Desc: Adobe...
Adobe Device Central CS5 DLL Hijacking Exploit (qtcf.dll)
Exploit for windows platform in category local exploits ========================================================= Adobe Device Central CS5 DLL Hijacking Exploit qtcf.dll ========================================================= / Exploit Title: Adobe Device Central CS5 DLL Hijacking Exploit...
Adobe ExtendedScript Toolkit CS5 3.5.0.52 - 'dwmapi.dll' DLL Hijacking
/ Adobe ExtendedScript Toolkit CS5 v3.5.0.52 dwmapi.dll DLL Hijacking Exploit Vendor: Adobe Systems Inc. Product Web Page: http://www.adobe.com Affected Version: CS5 v3.5.0.52 ExtendScript 4.1.23 ScriptUI 5.1.37 Summary: The ExtendScript Toolkit ESTK 3.5.0 is a scripting utility included with...