9.3

CVE-2010-3127

EPSS 5.33%
Published 26.08.2010 18:36:35
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
Teams watchlist Login
Open Login

Untrusted search path vulnerability in Adobe PhotoShop CS2 through CS5 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or Wintab32.dll that is located in the same folder as a PSD or other file that is processed by PhotoShop.  NOTE: some of these details are obtained from third party information.

Affected products Warnungen 0 Metrics 2 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

Adobe ≫ Photoshop Version9.0

Adobe ≫ Photoshop Version9.0.1

Adobe ≫ Photoshop Version9.0.2

Adobe ≫ Photoshop Version10.0

Adobe ≫ Photoshop Version11.0

Adobe ≫ Photoshop Version12.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	5.33%	0.897

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://blog.zoller.lu/2010/08/cve-2010-xn-loadlibrarygetprocaddress.html

http://secunia.com/advisories/41060

Vendor Advisory

http://www.exploit-db.com/exploits/14741

http://www.vupen.com/english/advisories/2010/2170

Vendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6778

https://nvd.nist.gov/vuln/detail/CVE-2010-3127

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-3127

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-3127

EUVD