PT-2010-4594 · Adobe · Device Central Cs5

Glafkos Charalambous · Publicado 2010-08-27 · Atualizado 2018-10-10 · CVE-2010-3149

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Device Central CS5 version 3.0.0(376) Adobe Device Central CS5 version 3.0.1.0 (3027) Adobe Device Central CS5 (other versions possibly affected)

Description The issue allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks. This is achieved via a Trojan horse qtcf.dll located in the same folder as an ADCP file.

Recommendations For Adobe Device Central CS5 version 3.0.0(376), consider removing or restricting access to the qtcf.dll file until a patch is available. For Adobe Device Central CS5 version 3.0.1.0 (3027), avoid using the software with untrusted ADCP files until the issue is resolved. For other possibly affected versions of Adobe Device Central CS5, restrict access to the qtcf.dll file and avoid using the software with untrusted ADCP files until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2010-3149

Produtos afetados

Device Central Cs5

Referências · 7

• 🔥 http://exploit-db.com/exploits/14755 · Exploit
• 🔥 https://exploit-db.com/exploits/14755 · Exploit
• http://secunia.com/advisories/41118 · Aviso do Fabricante
• http://securityfocus.com/archive/1/513323/100/0/threaded · Nota
• http://osvdb.org/67533 · Nota
• http://vupen.com/english/advisories/2010/2196 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-3149 · Nota de Segurança