PT-2010-4572 · Adobe · Photoshop

Storm · Publicado 2010-08-26 · Atualizado 2017-09-19 · CVE-2010-3127

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe PhotoShop versions CS2 through CS5

Description The issue allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks. This can be achieved via a Trojan horse dwmapi.dll or Wintab32.dll that is located in the same folder as a PSD or other file that is processed by PhotoShop.

Recommendations For Adobe PhotoShop versions CS2 through CS5, consider restricting the execution of files from untrusted locations to minimize the risk of exploitation. As a temporary workaround, avoid processing PSD or other files from potentially compromised folders until a fix is available.

Exploit

Correção

Identificadores relacionados

CVE-2010-3127

Produtos afetados

Photoshop

Referências · 7

• 🔥 https://exploit-db.com/exploits/14741 · Exploit
• 🔥 http://exploit-db.com/exploits/14741 · Exploit
• http://secunia.com/advisories/41060 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6778 · Nota
• http://blog.zoller.lu/2010/08/cve-2010-xn-loadlibrarygetprocaddress.html · Nota
• http://vupen.com/english/advisories/2010/2170 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-3127 · Nota de Segurança