critical9.3Public exploit code
CVE-2010-3132
Untrusted search path vulnerability in Adobe Dreamweaver CS5 11.0 build 4916, build 4909, and probably other versions, allows local users, and possibly remote …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Adobe Dreamweaver CS5 11.0 build 4909 - 'mfc90loc.dll' DLL Hijacking2010-08-25 · local · windows
- Adobe Dreamweaver CS4 - 'ibfs32.dll' DLL Hijacking2010-08-24 · local · windows
Impact
Untrusted search path vulnerability in Adobe Dreamweaver CS5 11.0 build 4916, build 4909, and probably other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) mfc90loc.dll or (2) dwmapi.dll that is located in the same folder as a CSS, PHP, ASP, or other file that automatically launches Dreamweaver.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Dreamweaver | Version 11.0 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/41110
- http://www.exploit-db.com/exploits/14740
- http://www.vupen.com/english/advisories/2010/2171
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12035
- http://secunia.com/advisories/41110
- http://www.exploit-db.com/exploits/14740
- http://www.vupen.com/english/advisories/2010/2171
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12035