CVE-2010-3152

Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or aires.dll that is located in the same folder as an .ait or .eps file.

• http://osvdb.org/67534
• http://secunia.com/advisories/41134Vendor Advisory
• http://www.adobe.com/support/security/bulletins/apsb10-29.html
• http://www.exploit-db.com/exploits/14773/Exploit
• http://www.securityfocus.com/archive/1/513335/100/0/threaded
• http://www.securitytracker.com/id?1024865
• http://www.vupen.com/english/advisories/2010/2198Vendor Advisory
• http://osvdb.org/67534
• http://secunia.com/advisories/41134Vendor Advisory
• http://www.adobe.com/support/security/bulletins/apsb10-29.html
• http://www.exploit-db.com/exploits/14773/Exploit
• http://www.securityfocus.com/archive/1/513335/100/0/threaded
• http://www.securitytracker.com/id?1024865
• http://www.vupen.com/english/advisories/2010/2198Vendor Advisory

Published

Aug 27, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-3146Multiple untrusted search path vulnerabilities in Microsoft …
• CVE-2010-3147Untrusted search path vulnerability in wab.exe 6.00.2900.551…
• CVE-2010-3148Untrusted search path vulnerability in Microsoft Visio 2003 …
• CVE-2010-3149Untrusted search path vulnerability in Adobe Device Central …
• CVE-2010-3150Untrusted search path vulnerability in Adobe Premier Pro CS4…
• CVE-2010-3151Untrusted search path vulnerability in Adobe On Location CS4…
• CVE-2010-3153Untrusted search path vulnerability in Adobe InDesign CS4 6.…
• CVE-2010-3154Untrusted search path vulnerability in Adobe Extension Manag…
• CVE-2010-3155Untrusted search path vulnerability in Adobe ExtendScript To…
• CVE-2010-3156Untrusted search path vulnerability in K2 K2Editor before 1.…
• CVE-2010-3157Untrusted search path vulnerability in XacRett before 50 all…
• CVE-2010-3158Untrusted search path vulnerability in Lhaplus before 1.58 a…