Description
Untrusted search path vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Flash Player.
References
- ADV-2011-0192 vdb-entry
- 20101105 ASPR #2010-11-05-01: Remote Binary Planting in Adobe Flash Player mailing-list
- http://support.apple.com/kb/HT4435
- oval:org.mitre.oval:def:6926 vdb-entry signature
- http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Bflash_player%5D_10.1.x_insecure_dll_hijacking_%28dwmapi.dll%29
- 43026 third-party-advisory
- GLSA-201101-09 vendor-advisory
- APPLE-SA-2010-11-10-1 vendor-advisory
- http://www.acrossecurity.com/aspr/ASPR-2010-11-05-1-PUB.txt
- SUSE-SA:2010:055 vendor-advisory
- SSRT100428 vendor-advisory
- ADV-2010-2903 vdb-entry
- http://www.adobe.com/support/security/bulletins/apsb10-26.html
- 20100910 Adobe Flash Player IE version 10.1.x Insecure DLL Hijacking Vulnerability (dwmapi.dll) mailing-list
- 44671 vdb-entry