Lucene search

MitreCVE-2010-3151

HistoryAug 27, 2010 - 7:00 p.m.

CVE-2010-3151

2010-08-2719:00:18

mitre

web.nvd.nist.gov

cve-2010-3151

adobe on location cs4

vulnerability

dll hijacking

security

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

High

EPSS

0.007

Percentile

80.9%

JSON

Untrusted search path vulnerability in Adobe On Location CS4 Build 315 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ibfs32.dll that is located in the same folder as an OLPROJ file.

Affected configurations

Nvd

Node

adobeonlocation_cs4Match4.0.1

adobeonlocation_cs4Match4.0.2

adobeonlocation_cs4Match4.0.3

AND

adobepremiere_pro_cs4Match4.0.1

adobepremiere_pro_cs4Match4.1.0

adobepremiere_pro_cs4Match4.2.0

adobepremiere_pro_cs4Match4.2.1

VendorProductVersionCPE
adobeonlocation_cs44.0.1cpe:2.3:a:adobe:onlocation_cs4:4.0.1:*:*:*:*:*:*:*
adobeonlocation_cs44.0.2cpe:2.3:a:adobe:onlocation_cs4:4.0.2:*:*:*:*:*:*:*
adobeonlocation_cs44.0.3cpe:2.3:a:adobe:onlocation_cs4:4.0.3:*:*:*:*:*:*:*
adobepremiere_pro_cs44.0.1cpe:2.3:a:adobe:premiere_pro_cs4:4.0.1:*:*:*:*:*:*:*
adobepremiere_pro_cs44.1.0cpe:2.3:a:adobe:premiere_pro_cs4:4.1.0:*:*:*:*:*:*:*
adobepremiere_pro_cs44.2.0cpe:2.3:a:adobe:premiere_pro_cs4:4.2.0:*:*:*:*:*:*:*
adobepremiere_pro_cs44.2.1cpe:2.3:a:adobe:premiere_pro_cs4:4.2.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
adobe	onlocation_cs4	4.0.1	cpe:2.3:a:adobe:onlocation_cs4:4.0.1:::::::*
adobe	onlocation_cs4	4.0.2	cpe:2.3:a:adobe:onlocation_cs4:4.0.2:::::::*
adobe	onlocation_cs4	4.0.3	cpe:2.3:a:adobe:onlocation_cs4:4.0.3:::::::*
adobe	premiere_pro_cs4	4.0.1	cpe:2.3:a:adobe:premiere_pro_cs4:4.0.1:::::::*
adobe	premiere_pro_cs4	4.1.0	cpe:2.3:a:adobe:premiere_pro_cs4:4.1.0:::::::*
adobe	premiere_pro_cs4	4.2.0	cpe:2.3:a:adobe:premiere_pro_cs4:4.2.0:::::::*
adobe	premiere_pro_cs4	4.2.1	cpe:2.3:a:adobe:premiere_pro_cs4:4.2.1:::::::*

References

www.exploit-db.com/exploits/14772/

www.securityfocus.com/archive/1/513332/100/0/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/64445

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

High

EPSS

0.007

Percentile

80.9%

JSON

Related for CVE-2010-3151