Vulnerability in Adobe Extension Manager Cs5
CVE-2010-3154
Untrusted search path vulnerability in Adobe Extension Manager CS5 5.0.298 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .mxi or .mxp file.
EPSS: 0.113 (95.5th percentile) — read the EPSS interpretation.
Affected products
- Adobe Extension_manager_cs5 — versions 5.0.298
- N/a — versions n/a
References
- cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)