PT-2010-4586 · Microsoft · Powerpoint 2010

Theleader · Published 2010-08-27 · Updated 2010-11-11 · CVE-2010-3141

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft PowerPoint 2010

Description The issue allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks. This is achieved via a Trojan horse pptimpconv.dll located in the same folder as certain file types, including .odp, .pot, .potm, .potx, .ppa, .pps, .ppsm, .ppsx, .ppt, .pptm, .pptx, .pwz, .sldm, or .sldx.

Recommendations For Microsoft PowerPoint 2010, consider removing or restricting access to the pptimpconv.dll file as a temporary workaround to minimize the risk of exploitation. Additionally, avoid opening files from untrusted sources to reduce the risk of DLL hijacking attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2010-3141

Affected Products

Powerpoint 2010

References · 5

• 🔥 https://exploit-db.com/exploits/14782 · Exploit
• 🔥 https://exploit-db.com/exploits/14723 · Exploit
• 🔥 http://exploit-db.com/exploits/14723 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-3141 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3141 · Note