CVE-2010-3149

Published: Aug 27, 2010Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Untrusted search path vulnerability in Adobe Device Central CS5 3.0.0(376), 3.0.1.0 (3027), and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse qtcf.dll that is located in the same folder as an ADCP file.

Affected (1)

Products: Adobe: Device Central Cs5

1 product

Device Central Cs5

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Adobe Device Central Cs5	Version 3.0.0(376)

References (10)

http://osvdb.org/67533

Source: cve@mitre.org

http://secunia.com/advisories/41118

Source: cve@mitre.org

Vendor Advisory

http://www.exploit-db.com/exploits/14755/

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/archive/1/513323/100/0/threaded

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2010/2196

Source: cve@mitre.org

http://osvdb.org/67533

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/41118

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.exploit-db.com/exploits/14755/

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/archive/1/513323/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/2196

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.