9.3

CVE-2010-3153

Exploit

EPSS 13.56%
Veröffentlicht 27.08.2010 19:00:19
Zuletzt bearbeitet 16.06.2026 23:22:15
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Untrusted search path vulnerability in Adobe InDesign CS4 6.0, InDesign CS5 7.0.2 and earlier, Adobe InDesign Server CS5 7.0.2 and earlier, and Adobe InCopy CS5 7.0.2 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ibfs32.dll that is located in the same folder as an .indl, .indp, .indt, or .inx file.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Adobe ≫ Indesign Cs4 Version6.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	13.56%	0.96

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://secunia.com/advisories/41126

http://www.adobe.com/support/security/bulletins/apsb10-24.html

http://www.exploit-db.com/exploits/14775/

Exploit

http://www.securityfocus.com/archive/1/513340/100/0/threaded

http://www.securitytracker.com/id?1024612

https://nvd.nist.gov/vuln/detail/CVE-2010-3153

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-3153

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-3153

EUVD