Design/Logic Flaw

Untrusted search path vulnerability in Adobe On Location CS4 Build 315 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ibfs32.dll that is located in the same folder as an OLPROJ file...

Design/Logic Flaw

Untrusted search path vulnerability in Microsoft Windows Internet Communication Settings on Windows XP SP3 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse schannel.dll that is located in the same folder as an ISP fi...

Design/Logic Flaw

Untrusted search path vulnerability in Microsoft Windows Progman Group Converter grpconv.exe allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse imm.dll that is located in the same folder as a .grp file...

CVE-2010-3139

Untrusted search path vulnerability in Microsoft Windows Progman Group Converter grpconv.exe allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse imm.dll that is located in the same folder as a .grp file...

CVE-2010-3149

CVE-2010-3149 – Adobe Device Central CS5 DLL hijacking vulnerability . Affected: Adobe Device Central CS5 3.0.0(376) and 3.0.1.0(3027), with likelihood of other versions. Root cause: untrusted search path allows a Trojan horse qtcf.dll in the same folder as an ADCP file to be loaded, enabling arb...

CVE-2010-3140

The vulnerability CVE-2010-3140 affects Windows XP SP3, specifically an untrusted search path in Windows Internet Connection Settings. The issue can allow local users, and possibly remote attackers, to run arbitrary code via a Trojan horse schannel.dll located in the same folder as an ISP file, e...

CVE-2010-3142

Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse rpawinet.dll that is located in the same folder as a .odp, .pothtml, .potm, .potx, .ppa, .ppam,...

CVE-2010-3154

Untrusted search path vulnerability in Adobe Extension Manager CS5 5.0.298 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .mxi or .mxp file...

CVE-2010-3152

Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or aires.dll that is located in the...

CVE-2010-3142

Microsoft Office PowerPoint 2007 contains an Untrusted search path (insecure library loading) vulnerability allowing local users, and possibly remote attackers, to hijack DLLs via a Trojan horse rpawinet.dll located in the same folder as specific PowerPoint-related files (.odp, .pothtml, .potm, ....

CVE-2010-3151

The vulnerability CVE-2010-3151 affects Adobe On Location CS4 Build 315. The issue is an untrusted search path that allows DLL hijacking via a Trojan ibfs32.dll located in the same folder as an OLPROJ file, enabling local code execution. Documents consistently identify this as a Windows library-l...

CVE-2010-3139

CVE-2010-3139 refers to an untrusted search path/insecure library loading vulnerability in Microsoft Windows Progman Group Converter (grpconv.exe). Multiple sources describe that a Trojan horse imm.dll located in the same folder as a .grp file can be hijacked to execute arbitrary code, potentiall...

CVE-2010-3153

CVE-2010-3153 affects Adobe InDesign CS4 CS5 (Windows) and InDesign Server CS5, and InCopy CS5 up to 7.0.2. The vulnerability arises from DLL hijacking via a Trojan ibfs32.dll placed in the same folder as .indl, .indp, .indt, or .inx files, enabling untrusted search path execution. Impact is arbi...

CVE-2010-3143

CVE-2010-3143 describes an insecure DLL search path (untrusted library loading) in Windows Address Book/Contacts. An attacker could place a malicious wab32res.dll in the same folder as a .contact/.group/.p7c/.vcf/.wab file to trigger arbitrary code execution. This is a local/remote‑initiated DLL ...

CVE-2010-3143

Untrusted search path vulnerability in Microsoft Windows Contacts allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wab32res.dll that is located in the same folder as a .contact, .group, .p7c, .vcf, or .wab file. NOTE...

CVE-2010-3150

Technical details about CVE-2010-3150 are not publicly provided in the connected documents. Available entries repeat the same vulnerability description without additional product/version specifics or exploit data. Monitor for updates from official advisories.

CVE-2010-3154

CVE-2010-3154 affects Adobe Extension Manager CS5 (version 5.0.298). The vulnerability arises from an untrusted search path where a Trojan horse dwmapi.dll placed in the same folder as a .mxi or .mxp file can enable DLL hijacking, allowing local users and potentially remote attackers to execute a...

CVE-2010-3141

CVE-2010-3141 describes an Untrusted Search Path (DLL hijacking) vulnerability in Microsoft PowerPoint 2010. An attacker could trigger arbitrary code execution by placing aTrojan horse pptimpconv.dll in the same folder as an affected file type (e.g., .ppt, .pptx, .odp, etc.). The root cause is un...

CVE-2010-3151

Untrusted search path vulnerability in Adobe On Location CS4 Build 315 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ibfs32.dll that is located in the same folder as an OLPROJ file...

CVE-2010-3155

Untrusted search path vulnerability in Adobe ExtendScript Toolkit ESTK CS5 3.5.0.52 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .jsx file...