CVE

Id
45716  
CVE No.
CVE-2010-3132  
Status
Candidate  
Description
Untrusted search path vulnerability in Adobe Dreamweaver CS5 11.0 build 4916, build 4909, and probably other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) mfc90loc.dll or (2) dwmapi.dll that is located in the same folder as a CSS, PHP, ASP, or other file that automatically launches Dreamweaver.  
Phase
Assigned (20100826)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
497721 45716 CVE-2010-3132 EXPLOIT-DB:14740  View
497722 45716 CVE-2010-3132 URL:http://www.exploit-db.com/exploits/14740  View
497723 45716 CVE-2010-3132 OVAL:oval:org.mitre.oval:def:12035  View
497724 45716 CVE-2010-3132 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12035  View
497725 45716 CVE-2010-3132 SECUNIA:41110  View
497726 45716 CVE-2010-3132 URL:http://secunia.com/advisories/41110  View
497727 45716 CVE-2010-3132 VUPEN:ADV-2010-2171  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39856 JVNDB-2010-005641 Skype における DLL ハイジャック攻撃を実行される脆弱性 Skype は、検索パスに関する処理に不備があるため、任意のコードを実行される、および DLL ハイジャック攻撃を実行される脆弱性が存在します。 CVE-2010-3136 45716 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005641.html  View