Unscored severity · published Aug 27, 2010
CVE-2010-3142
Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking…
–
CVSS
16.3%
EPSS
No
On KEV
Description
Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse rpawinet.dll that is located in the same folder as a .odp, .pothtml, .potm, .potx, .ppa, .ppam, .pps, .ppt, .ppthtml, .pptm, .pptxml, .pwz, .sldm, .sldx, and .thmx file.
Exploitation
Is it being used?
Exploit prediction (EPSS)16.3% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PO
Powerpoint · Microsoft
2007 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3142
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3142
Exploit
http://www.exploit-db.com/exploits/14782/
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12219
More from Powerpoint
8.8
CVE-2015-2424
Microsoft PowerPoint Memory Corruption Vulnerability
8.8
CVE-2009-0556
Microsoft Office PowerPoint Code Injection Vulnerability
8.8
CVE-2007-0671
Microsoft Office Excel Remote Code Execution Vulnerability
7.8
CVE-2010-2572
Microsoft PowerPoint Buffer Overflow Vulnerability
9.1
CVE-2024-39804
A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS