Vulnerability in Adobe Captivate

CVE-2010-3191

Untrusted search path vulnerability in Adobe Captivate 5.0.0.596, and possibly other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .cptx file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

EPSS: 0.057 (92.2th percentile) — read the EPSS interpretation.

Affected products

Adobe Captivate — versions 5.0.0.596
N/a — versions n/a

References

cve@mitre.org (signature, x_refsource_OVAL, vdb-entry)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)