Vulnerability in Adobe Flash Player
CVE-2010-3975
Untrusted search path vulnerability in Adobe Flash Player 9 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse schannel.dll that is located in the same folder as a file that is processed by Flash.
EPSS: 0.067 (93.2th percentile) — read the EPSS interpretation.
Affected products
- Adobe Flash_player — versions 9.0
- N/a — versions n/a
References
- psirt@adobe.com (mailing-list, Exploit, x_refsource_BUGTRAQ)
- psirt@adobe.com (signature, x_refsource_OVAL, vdb-entry)