PT-2010-4572 · Adobe · Photoshop

Storm · Published 2010-08-26 · Updated 2017-09-19 · CVE-2010-3127

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe PhotoShop versions CS2 through CS5

Description The issue allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks. This can be achieved via a Trojan horse dwmapi.dll or Wintab32.dll that is located in the same folder as a PSD or other file that is processed by PhotoShop.

Recommendations For Adobe PhotoShop versions CS2 through CS5, consider restricting the execution of files from untrusted locations to minimize the risk of exploitation. As a temporary workaround, avoid processing PSD or other files from potentially compromised folders until a fix is available.

Exploit

Fix

Related Identifiers

CVE-2010-3127

Affected Products

Photoshop

References · 7

• 🔥 https://exploit-db.com/exploits/14741 · Exploit
• 🔥 http://exploit-db.com/exploits/14741 · Exploit
• http://secunia.com/advisories/41060 · Vendor Advisory
• http://vupen.com/english/advisories/2010/2170 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-3127 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6778 · Note
• http://blog.zoller.lu/2010/08/cve-2010-xn-loadlibrarygetprocaddress.html · Note