critical9.3Public exploit code
CVE-2010-3142
Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attackers, to execute arbitrary code and conduc…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft PowerPoint 2007 - 'rpawinet.dll' DLL Hijacking2010-08-25 · local · windows
- Microsoft PowerPoint 2010 - 'pptimpconv.dll' DLL Hijacking2010-08-24 · local · windows
Impact
Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse rpawinet.dll that is located in the same folder as a .odp, .pothtml, .potm, .potx, .ppa, .ppam, .pps, .ppt, .ppthtml, .pptm, .pptxml, .pwz, .sldm, .sldx, and .thmx file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Powerpoint | Version 2007 |