Unscored severity · published Aug 26, 2010
CVE-2010-3127
Untrusted search path vulnerability in Adobe PhotoShop CS2 through CS5 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking…
–
CVSS
13.9%
EPSS
No
On KEV
Description
Untrusted search path vulnerability in Adobe PhotoShop CS2 through CS5 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or Wintab32.dll that is located in the same folder as a PSD or other file that is processed by PhotoShop. NOTE: some of these details are obtained from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)13.9% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
Photoshop · Adobe
9.0; 9.0.1; 9.0.2; 10.0; 11.0; 12.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3127
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3127
blog.zoller.lu
http://blog.zoller.lu/2010/08/cve-2010-xn-loadlibrarygetprocaddress.html
Vendor Advisory
http://secunia.com/advisories/41060
www.exploit-db.com
http://www.exploit-db.com/exploits/14741
Vendor Advisory
http://www.vupen.com/english/advisories/2010/2170
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6778
More from Photoshop
9.8
CVE-2017-11304
An issue was discovered in Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions
9.8
CVE-2017-11303
An issue was discovered in Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions
8.8
CVE-2020-9687
Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have an out-of-bounds write vulnerability
8.8
CVE-2020-9685
Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have an out-of-bounds write vulnerability
8.8
CVE-2020-9684
Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have an out-of-bounds write vulnerability