CVE-2010-3153

Exploit

EPSS 3.11%
Veröffentlicht 27.08.2010 19:00:19
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Untrusted search path vulnerability in Adobe InDesign CS4 6.0, InDesign CS5 7.0.2 and earlier, Adobe InDesign Server CS5 7.0.2 and earlier, and Adobe InCopy CS5 7.0.2 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ibfs32.dll that is located in the same folder as an .indl, .indp, .indt, or .inx file.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Adobe ≫ Indesign Cs4 Version6.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.11%	0.863

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://secunia.com/advisories/41126

http://www.adobe.com/support/security/bulletins/apsb10-24.html

http://www.exploit-db.com/exploits/14775/

Exploit

http://www.securityfocus.com/archive/1/513340/100/0/threaded

http://www.securitytracker.com/id?1024612

https://nvd.nist.gov/vuln/detail/CVE-2010-3153

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-3153

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-3153

EUVD