CVE-2010-3132
Adobe Dreamweaver CS5 11.0 build 4916 and 4909 - Untrusted Search Path and DLL Hijacking via Trojan Horse DLL
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2010-3132. PoCs published by diwr, Glafkos Charalambous.
AI-analyzed exploit summary This exploit leverages DLL hijacking in Adobe Dreamweaver CS5 by replacing the legitimate mfc90loc.dll with a malicious one. The provided code compiles into a DLL that spawns calc.exe when loaded, demonstrating arbitrary code execution.
Description
Untrusted search path vulnerability in Adobe Dreamweaver CS5 11.0 build 4916, build 4909, and probably other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) mfc90loc.dll or (2) dwmapi.dll that is located in the same folder as a CSS, PHP, ASP, or other file that automatically launches Dreamweaver.
Exploits (2)
This exploit leverages DLL hijacking in Adobe Dreamweaver CS5 by replacing the legitimate mfc90loc.dll with a malicious one. The provided code compiles into a DLL that spawns calc.exe when loaded, demonstrating arbitrary code execution.
This exploit demonstrates DLL hijacking in Adobe Dreamweaver CS4 by replacing the legitimate ibfs32.dll with a malicious one. The PoC displays a message box upon execution, confirming the vulnerability.