critical9.3Public exploit code
CVE-2010-3141
Untrusted search path vulnerability in Microsoft PowerPoint 2010 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL h…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft PowerPoint 2007 - 'rpawinet.dll' DLL Hijacking2010-08-25 · local · windows
- Microsoft PowerPoint 2010 - 'pptimpconv.dll' DLL Hijacking2010-08-24 · local · windows
Impact
Untrusted search path vulnerability in Microsoft PowerPoint 2010 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse pptimpconv.dll that is located in the same folder as a .odp, .pot, .potm, .potx, .ppa, .pps, .ppsm, .ppsx, .ppt, .pptm, .pptx, .pwz, .sldm, or .sldx file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Powerpoint | Version 2010 |