Unscored severity · published Aug 27, 2010
CVE-2010-3152
Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions allows local users, and possibly remote attackers, to…
–
CVSS
16.8%
EPSS
No
On KEV
Description
Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or aires.dll that is located in the same folder as an .ait or .eps file.
Exploitation
Is it being used?
Exploit prediction (EPSS)16.8% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IL
Illustrator · Adobe
14.0; 15.0.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3152
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3152
osvdb.org
http://osvdb.org/67534
Vendor Advisory
http://secunia.com/advisories/41134
www.adobe.com
http://www.adobe.com/support/security/bulletins/apsb10-29.html
Exploit
http://www.exploit-db.com/exploits/14773/
www.securityfocus.com
http://www.securityfocus.com/archive/1/513335/100/0/threaded
www.securitytracker.com
http://www.securitytracker.com/id?1024865
More from Illustrator
9.3
CVE-2026-48334
Illustrator | Improper Input Validation (CWE-20)
8.8
CVE-2021-21105
Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file
8.8
CVE-2021-21104
Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file
8.8
CVE-2021-21103
Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file
8.8
CVE-2021-21102
Adobe Illustrator version 25.2 (and earlier) is affected by a Path Traversal vulnerability when parsing a specially crafted file