Design/Logic Flaw

Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or aires.dll that is located in the...

Design/Logic Flaw

Untrusted search path vulnerability in Adobe InDesign CS4 6.0, InDesign CS5 7.0.2 and earlier, Adobe InDesign Server CS5 7.0.2 and earlier, and Adobe InCopy CS5 7.0.2 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a...

Design/Logic Flaw

Untrusted search path vulnerability in Adobe Extension Manager CS5 5.0.298 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .mxi or .mxp file...

Design/Logic Flaw

Untrusted search path vulnerability in Adobe ExtendScript Toolkit ESTK CS5 3.5.0.52 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .jsx file...

Design/Logic Flaw

Untrusted search path vulnerability in Microsoft Windows Progman Group Converter grpconv.exe allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse imm.dll that is located in the same folder as a .grp file...

Design/Logic Flaw

Untrusted search path vulnerability in Microsoft Windows Internet Communication Settings on Windows XP SP3 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse schannel.dll that is located in the same folder as an ISP fi...

Design/Logic Flaw

Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse rpawinet.dll that is located in the same folder as a .odp, .pothtml, .potm, .potx, .ppa, .ppam,...

Design/Logic Flaw

Untrusted search path vulnerability in Adobe Premier Pro CS4 4.0.0 314 MC: 160820 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ibfs32.dll that is located in the same folder as a .pproj, .prfpset, .prexport, .prm,...

CVE-2010-3153

CVE-2010-3153 affects Adobe InDesign CS4 CS5 (Windows) and InDesign Server CS5, and InCopy CS5 up to 7.0.2. The vulnerability arises from DLL hijacking via a Trojan ibfs32.dll placed in the same folder as .indl, .indp, .indt, or .inx files, enabling untrusted search path execution. Impact is arbi...

CVE-2010-3149

CVE-2010-3149 – Adobe Device Central CS5 DLL hijacking vulnerability . Affected: Adobe Device Central CS5 3.0.0(376) and 3.0.1.0(3027), with likelihood of other versions. Root cause: untrusted search path allows a Trojan horse qtcf.dll in the same folder as an ADCP file to be loaded, enabling arb...

CVE-2010-3143

CVE-2010-3143 describes an insecure DLL search path (untrusted library loading) in Windows Address Book/Contacts. An attacker could place a malicious wab32res.dll in the same folder as a .contact/.group/.p7c/.vcf/.wab file to trigger arbitrary code execution. This is a local/remote‑initiated DLL ...

CVE-2010-3139

Untrusted search path vulnerability in Microsoft Windows Progman Group Converter grpconv.exe allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse imm.dll that is located in the same folder as a .grp file...

CVE-2010-3154

CVE-2010-3154 affects Adobe Extension Manager CS5 (version 5.0.298). The vulnerability arises from an untrusted search path where a Trojan horse dwmapi.dll placed in the same folder as a .mxi or .mxp file can enable DLL hijacking, allowing local users and potentially remote attackers to execute a...

CVE-2010-3152

CVE-2010-3152 affects Adobe Illustrator CS4/CS5 (14.0.0, 15.0.1 and earlier). It is caused by an untrusted search path allowing DLL hijacking via a Trojan horse dwmapi.dll or aires.dll located in the same folder as an .ait/.eps file, enabling arbitrary code execution. Affected versions include CS...

CVE-2010-3151

The vulnerability CVE-2010-3151 affects Adobe On Location CS4 Build 315. The issue is an untrusted search path that allows DLL hijacking via a Trojan ibfs32.dll located in the same folder as an OLPROJ file, enabling local code execution. Documents consistently identify this as a Windows library-l...

CVE-2010-3142

Microsoft Office PowerPoint 2007 contains an Untrusted search path (insecure library loading) vulnerability allowing local users, and possibly remote attackers, to hijack DLLs via a Trojan horse rpawinet.dll located in the same folder as specific PowerPoint-related files (.odp, .pothtml, .potm, ....

CVE-2010-3143

Untrusted search path vulnerability in Microsoft Windows Contacts allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wab32res.dll that is located in the same folder as a .contact, .group, .p7c, .vcf, or .wab file. NOTE...

CVE-2010-3151

Untrusted search path vulnerability in Adobe On Location CS4 Build 315 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ibfs32.dll that is located in the same folder as an OLPROJ file...

CVE-2010-3153

Untrusted search path vulnerability in Adobe InDesign CS4 6.0, InDesign CS5 7.0.2 and earlier, Adobe InDesign Server CS5 7.0.2 and earlier, and Adobe InCopy CS5 7.0.2 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a...

CVE-2010-3154

Untrusted search path vulnerability in Adobe Extension Manager CS5 5.0.298 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .mxi or .mxp file...