CVE-2010-3152 - Vulnerability Details - OpenCVE

Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or aires.dll that is located in the same folder as an .ait or .eps file.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

The EPSS score is 0.04626.

Key SSVC decision points have not yet been added.

Vendors	Products
Adobe Subscribe	Illustrator Subscribe

Configuration 1 [-]

OR	cpe:2.3:a:adobe:illustrator:14.0:::::::*
	cpe:2.3:a:adobe:illustrator:15.0.1:::::::*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2010-3152	Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or aires.dll that is located in the same folder as an .ait or .eps file.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://osvdb.org/67534
http://secunia.com/advisories/41134
http://www.adobe.com/support/security/bulletins/apsb10-29.html
http://www.exploit-db.com/exploits/14773/
http://www.securityfocus.com/archive/1/513335/100/0/threaded
http://www.securitytracker.com/id?1024865
http://www.vupen.com/english/advisories/2010/2198

History

No history.

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2010-08-27T18:10:00

Updated: 2024-08-07T03:03:17.117Z

Reserved: 2010-08-27T00:00:00

Link: CVE-2010-3152

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2010-08-27T19:00:19.037

Modified: 2025-04-11T00:51:21.963

Link: CVE-2010-3152

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

NVD-CWE-Other

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2010-08-25T00:00:00", "descriptions": [{"lang": "en", "value": "Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or aires.dll that is located in the same folder as an .ait or .eps file."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-10T18:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www.adobe.com/support/security/bulletins/apsb10-29.html"}, {"name": "20100825 Adobe Illustrator CS4 DLL Hijacking Exploit (aires.dll)", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/513335/100/0/threaded"}, {"name": "ADV-2010-2198", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2010/2198"}, {"name": "41134", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/41134"}, {"name": "14773", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "http://www.exploit-db.com/exploits/14773/"}, {"name": "1024865", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1024865"}, {"name": "67534", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/67534"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2010-3152", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or aires.dll that is located in the same folder as an .ait or .eps file."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://www.adobe.com/support/security/bulletins/apsb10-29.html", "refsource": "CONFIRM", "url": "http://www.adobe.com/support/security/bulletins/apsb10-29.html"}, {"name": "20100825 Adobe Illustrator CS4 DLL Hijacking Exploit (aires.dll)", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/513335/100/0/threaded"}, {"name": "ADV-2010-2198", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2010/2198"}, {"name": "41134", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/41134"}, {"name": "14773", "refsource": "EXPLOIT-DB", "url": "http://www.exploit-db.com/exploits/14773/"}, {"name": "1024865", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1024865"}, {"name": "67534", "refsource": "OSVDB", "url": "http://osvdb.org/67534"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T03:03:17.117Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.adobe.com/support/security/bulletins/apsb10-29.html"}, {"name": "20100825 Adobe Illustrator CS4 DLL Hijacking Exploit (aires.dll)", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/513335/100/0/threaded"}, {"name": "ADV-2010-2198", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2010/2198"}, {"name": "41134", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/41134"}, {"name": "14773", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "http://www.exploit-db.com/exploits/14773/"}, {"name": "1024865", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1024865"}, {"name": "67534", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/67534"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2010-3152", "datePublished": "2010-08-27T18:10:00", "dateReserved": "2010-08-27T00:00:00", "dateUpdated": "2024-08-07T03:03:17.117Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:adobe:illustrator:14.0:*:*:*:*:*:*:*", "matchCriteriaId": "7A639294-7BEA-4963-8F09-63751BC32D91", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:illustrator:15.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "C3E80BE4-6540-44D4-A8CD-AE90FC0E1F21", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or aires.dll that is located in the same folder as an .ait or .eps file."}, {"lang": "es", "value": "Una vulnerabilidad de ruta (path) de b\u00fasqueda no confiable en Illustrator CS4 de Adobe versiones 14.0.0, CS5 15.0.1 y anteriores, y posiblemente otras versiones, permite a los usuarios locales y posiblemente atacantes remotos, ejecutar c\u00f3digo arbitrario y conducir ataques de secuestro de DLL por medio de un archivo dwmapi.dll o aires.dll de tipo caballo de Troya, que se encuentra en la misma carpeta que un archivo .ait o .eps."}], "evaluatorComment": "Per: http://cwe.mitre.org/data/definitions/426.html\r\n\r\n'CWE-426: Untrusted Search Path'", "id": "CVE-2010-3152", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2010-08-27T19:00:19.037", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/67534"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/41134"}, {"source": "cve@mitre.org", "url": "http://www.adobe.com/support/security/bulletins/apsb10-29.html"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.exploit-db.com/exploits/14773/"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/513335/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1024865"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2010/2198"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/67534"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/41134"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.adobe.com/support/security/bulletins/apsb10-29.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.exploit-db.com/exploits/14773/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/513335/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id?1024865"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2010/2198"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}