What is CVE-2010-3142?

CVE-2010-3142 is a vulnerability in Microsoft Powerpoint. Published 2010-08-27.

Is CVE-2010-3142 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Microsoft Powerpoint

CVE-2010-3142

Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse rpawinet.dll that is located in the same folder as a .odp, .pothtml, .potm, .potx, .ppa, .ppam, .pps, .ppt, .ppthtml, .pptm, .pptxml, .pwz, .sldm, .sldx, and .thmx file.

EPSS: 0.163 (96.6th percentile) — read the EPSS interpretation.

Affected products

Microsoft Powerpoint — versions 2007
N/a — versions n/a

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

cve@mitre.org (signature, x_refsource_OVAL, vdb-entry)
cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)

Frequently asked questions

What is CVE-2010-3142?: CVE-2010-3142 is a vulnerability in Microsoft Powerpoint. Published 2010-08-27.
Is CVE-2010-3142 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.