CVE-2010-3142

published 2010-08-27

CVE-2010-3142: Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attackers, to execute arbitrary code and…

critical 9.3 CVSS 3.1

AV N AC M Au N C C I C A C

EXPLOIT

Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse rpawinet.dll that is located in the same folder as a .odp, .pothtml, .potm, .potx, .ppa, .ppam, .pps, .ppt, .ppthtml, .pptm, .pptxml, .pwz, .sldm, .sldx, and .thmx file.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
microsoft	office	—	—
microsoft	office	—	—
microsoft	powerpoint	—	—