CVE-2010-3153

CVE Database · CVE-2010-3153

CVE-2010-3153

· N/AModified

CVSS v3.1

N/A

EPSS

13.81%

Published

Aug 27, 2010

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

Exploit-DBAdobe InDesign CS4 - 'ibfs32.dll' DLL Hijacking

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Untrusted search path vulnerability in Adobe InDesign CS4 6.0, InDesign CS5 7.0.2 and earlier, Adobe InDesign Server CS5 7.0.2 and earlier, and Adobe InCopy CS5 7.0.2 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ibfs32.dll that is located in the same folder as an .indl, .indp, .indt, or .inx file.

Affected Products (1)

adobe · indesign_cs4vulnerable

References (10)

http://secunia.com/advisories/41126

http://www.adobe.com/support/security/bulletins/apsb10-24.html

http://www.exploit-db.com/exploits/14775/

Exploit

http://www.securityfocus.com/archive/1/513340/100/0/threaded

http://www.securitytracker.com/id?1024612