CVE

Id
46560  
CVE No.
CVE-2010-3976  
Status
Candidate  
Description
Untrusted search path vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Flash Player.  
Phase
Assigned (20101014)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
508551 46560 CVE-2010-3976 BUGTRAQ:20100910 Adobe Flash Player IE version 10.1.x Insecure DLL Hijacking Vulnerability (dwmapi.dll)  View
508552 46560 CVE-2010-3976 URL:http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-09/msg00070.html  View
508553 46560 CVE-2010-3976 BUGTRAQ:20101105 ASPR #2010-11-05-01: Remote Binary Planting in Adobe Flash Player  View
508554 46560 CVE-2010-3976 URL:http://www.securityfocus.com/archive/1/archive/1/514653/100/0/threaded  View
508555 46560 CVE-2010-3976 MISC:http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Bflash_player%5D_10.1.x_insecure_dll_hijacking_%28dwmapi.dll%29  View
508556 46560 CVE-2010-3976 MISC:http://www.acrossecurity.com/aspr/ASPR-2010-11-05-1-PUB.txt  View
508557 46560 CVE-2010-3976 CONFIRM:http://www.adobe.com/support/security/bulletins/apsb10-26.html  View
508558 46560 CVE-2010-3976 CONFIRM:http://support.apple.com/kb/HT4435  View
508559 46560 CVE-2010-3976 APPLE:APPLE-SA-2010-11-10-1  View
508560 46560 CVE-2010-3976 URL:http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html  View
508561 46560 CVE-2010-3976 GENTOO:GLSA-201101-09  View
508562 46560 CVE-2010-3976 URL:http://security.gentoo.org/glsa/glsa-201101-09.xml  View
508563 46560 CVE-2010-3976 HP:HPSBMA02663  View
508564 46560 CVE-2010-3976 URL:http://marc.info/?l=bugtraq&m=130331642631603&w=2  View
508565 46560 CVE-2010-3976 HP:SSRT100428  View
508566 46560 CVE-2010-3976 URL:http://marc.info/?l=bugtraq&m=130331642631603&w=2  View
508567 46560 CVE-2010-3976 SUSE:SUSE-SA:2010:055  View
508568 46560 CVE-2010-3976 URL:http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html  View
508569 46560 CVE-2010-3976 BID:44671  View
508570 46560 CVE-2010-3976 URL:http://www.securityfocus.com/bid/44671  View
508571 46560 CVE-2010-3976 OVAL:oval:org.mitre.oval:def:6926  View
508572 46560 CVE-2010-3976 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6926  View
508573 46560 CVE-2010-3976 SECUNIA:43026  View
508574 46560 CVE-2010-3976 URL:http://secunia.com/advisories/43026  View
508575 46560 CVE-2010-3976 VUPEN:ADV-2010-2903  View
508576 46560 CVE-2010-3976 URL:http://www.vupen.com/english/advisories/2010/2903  View
508577 46560 CVE-2010-3976 VUPEN:ADV-2011-0192  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37494 JVNDB-2010-003279 SAP BusinessObjects Enterprise の Dswsbobje におけるサービス運用妨害 (DoS) の脆弱性 SAP BusinessObjects Enterprise の Dswsbobje は、要求される CUID の数を制限しないため、サービス運用妨害状態となる脆弱性が存在します。 CVE-2010-3980 46560 4 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003279.html  View