CVE-2010-3152
Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier - Untrusted Search Path and DLL Hijacking via Trojan Horse DLL
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-3152. PoCs published by Glafkos Charalambous.
AI-analyzed exploit summary This exploit demonstrates DLL hijacking in Adobe Illustrator CS4 by placing a malicious 'aires.dll' in a specific directory. The DLL executes arbitrary code (a MessageBox) when the vulnerable application loads it.
Description
Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or aires.dll that is located in the same folder as an .ait or .eps file.
Exploits (1)
This exploit demonstrates DLL hijacking in Adobe Illustrator CS4 by placing a malicious 'aires.dll' in a specific directory. The DLL executes arbitrary code (a MessageBox) when the vulnerable application loads it.