PT-2010-4586 · Microsoft · Powerpoint 2010

Theleader · Publicado 2010-08-27 · Atualizado 2010-11-11 · CVE-2010-3141

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft PowerPoint 2010

Description The issue allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks. This is achieved via a Trojan horse pptimpconv.dll located in the same folder as certain file types, including .odp, .pot, .potm, .potx, .ppa, .pps, .ppsm, .ppsx, .ppt, .pptm, .pptx, .pwz, .sldm, or .sldx.

Recommendations For Microsoft PowerPoint 2010, consider removing or restricting access to the pptimpconv.dll file as a temporary workaround to minimize the risk of exploitation. Additionally, avoid opening files from untrusted sources to reduce the risk of DLL hijacking attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2010-3141

Produtos afetados

Powerpoint 2010

Referências · 5

• 🔥 https://exploit-db.com/exploits/14782 · Exploit
• 🔥 https://exploit-db.com/exploits/14723 · Exploit
• 🔥 http://exploit-db.com/exploits/14723 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3141 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-3141 · Nota de Segurança