CVE-2010-3976
Estado: ModificadaAlta (9.3)—
Vulnerabilidad de ruta (path) de búsqueda no confiable en Flash Player de Adobe anterior a versión 9.0.289.0 y versiones 10.x anteriores a 10.1.102.64 en Windows, permite a los usuarios locales, y posiblemente atacantes remotos, ejecutar código arbitrario y llevar a cabo ataques de secuestro DLL por medio de una biblioteca dwmapi.dll de tipo caballo de Troya que se encuentra en la misma carpeta que un archivo que es procesado por Flash Player.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
- Puntuación base: 9.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 9.29%
- Percentil entre todas las CVEs puntuadas: 95
- Fecha de la puntuación: 8/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-Other
Referencias
- http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Bflash_player%5D_10.1.x_insecure_dll_hijacking_%28dwmapi.dll%29
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html
- http://marc.info/?l=bugtraq&m=130331642631603&w=2
- http://secunia.com/advisories/43026
- http://security.gentoo.org/glsa/glsa-201101-09.xml
- http://support.apple.com/kb/HT4435
- http://www.acrossecurity.com/aspr/ASPR-2010-11-05-1-PUB.txt
- http://www.adobe.com/support/security/bulletins/apsb10-26.html
- http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-09/msg00070.html
- http://www.securityfocus.com/archive/1/514653/100/0/threaded
- http://www.securityfocus.com/bid/44671
- http://www.vupen.com/english/advisories/2010/2903
- http://www.vupen.com/english/advisories/2011/0192
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6926
- http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Bflash_player%5D_10.1.x_insecure_dll_hijacking_%28dwmapi.dll%29
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html
- http://marc.info/?l=bugtraq&m=130331642631603&w=2
- http://secunia.com/advisories/43026
- http://security.gentoo.org/glsa/glsa-201101-09.xml
- http://support.apple.com/kb/HT4435
- http://www.acrossecurity.com/aspr/ASPR-2010-11-05-1-PUB.txt
- http://www.adobe.com/support/security/bulletins/apsb10-26.html
- http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-09/msg00070.html
- http://www.securityfocus.com/archive/1/514653/100/0/threaded
- http://www.securityfocus.com/bid/44671
- http://www.vupen.com/english/advisories/2010/2903
- http://www.vupen.com/english/advisories/2011/0192
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6926
JSON original (NVD)
Mostrar
{
"id": "CVE-2010-3976",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 9.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "psirt@adobe.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2010-10-19T21:00:10.330",
"references": [
{
"url": "http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Bflash_player%5D_10.1.x_insecure_dll_hijacking_%28dwmapi.dll%29",
"source": "psirt@adobe.com"
},
{
"url": "http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html",
"tags": [
"Vendor Advisory"
],
"source": "psirt@adobe.com"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html",
"source": "psirt@adobe.com"
},
{
"url": "http://marc.info/?l=bugtraq&m=130331642631603&w=2",
"source": "psirt@adobe.com"
},
{
"url": "http://secunia.com/advisories/43026",
"tags": [
"Vendor Advisory"
],
"source": "psirt@adobe.com"
},
{
"url": "http://security.gentoo.org/glsa/glsa-201101-09.xml",
"source": "psirt@adobe.com"
},
{
"url": "http://support.apple.com/kb/HT4435",
"tags": [
"Vendor Advisory"
],
"source": "psirt@adobe.com"
},
{
"url": "http://www.acrossecurity.com/aspr/ASPR-2010-11-05-1-PUB.txt",
"source": "psirt@adobe.com"
},
{
"url": "http://www.adobe.com/support/security/bulletins/apsb10-26.html",
"tags": [
"Vendor Advisory"
],
"source": "psirt@adobe.com"
},
{
"url": "http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-09/msg00070.html",
"tags": [
"Exploit"
],
"source": "psirt@adobe.com"
},
{
"url": "http://www.securityfocus.com/archive/1/514653/100/0/threaded",
"source": "psirt@adobe.com"
},
{
"url": "http://www.securityfocus.com/bid/44671",
"source": "psirt@adobe.com"
},
{
"url": "http://www.vupen.com/english/advisories/2010/2903",
"tags": [
"Vendor Advisory"
],
"source": "psirt@adobe.com"
},
{
"url": "http://www.vupen.com/english/advisories/2011/0192",
"tags": [
"Vendor Advisory"
],
"source": "psirt@adobe.com"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6926",
"source": "psirt@adobe.com"
},
{
"url": "http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Bflash_player%5D_10.1.x_insecure_dll_hijacking_%28dwmapi.dll%29",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://marc.info/?l=bugtraq&m=130331642631603&w=2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/43026",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://security.gentoo.org/glsa/glsa-201101-09.xml",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://support.apple.com/kb/HT4435",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.acrossecurity.com/aspr/ASPR-2010-11-05-1-PUB.txt",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.adobe.com/support/security/bulletins/apsb10-26.html",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-09/msg00070.html",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/514653/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/44671",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2010/2903",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2011/0192",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6926",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Untrusted search path vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Flash Player."
},
{
"lang": "es",
"value": "Vulnerabilidad de ruta (path) de búsqueda no confiable en Flash Player de Adobe anterior a versión 9.0.289.0 y versiones 10.x anteriores a 10.1.102.64 en Windows, permite a los usuarios locales, y posiblemente atacantes remotos, ejecutar código arbitrario y llevar a cabo ataques de secuestro DLL por medio de una biblioteca dwmapi.dll de tipo caballo de Troya que se encuentra en la misma carpeta que un archivo que es procesado por Flash Player."
}
],
"lastModified": "2026-06-16T23:23:55.633",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BBFDF379-6774-41F0-A061-D1F83681502F",
"versionEndIncluding": "9.0.277.0"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "600DDA9D-6440-48D1-8539-7127398A8678"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "934A869D-D58D-4C36-B86E-013F62790585"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ACFA6611-99DA-48B0-89F7-DD99B8E30334"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "59AF804B-BD7A-4AD7-AD44-B5D980443B8B"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F5D52F86-2E38-4C66-9939-7603367B8D0E"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0557AA2A-FA3A-460A-8F03-DC74B149CA3D"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F22F1B02-CCF5-4770-A79B-1F58CA4321CE"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93957171-F1F4-43ED-A8B9-2D36C81EB1F9"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7AE89894-E492-4380-8A2B-4CDD3A15667A"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C6ED706-BAF2-4795-B597-6F7EE8CA8911"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "260E2CF6-4D15-4168-A933-3EC52D8F93FF"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D50BF190-2629-49A8-A377-4723C93FFB3E"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:9.0.125.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E59E2AD-38BB-46DF-AC0D-D36F1F259AD4"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:9.0.151.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD04F04C-30CE-4A8D-B254-B10DEF62CEEE"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:9.0.152.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "96DC7742-499D-4BF5-9C5B-FCFF912A9892"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:9.0.155.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BDD0A103-6D00-4D3D-9570-2DF74B6FE294"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:9.0.159.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "33AC4365-576C-487A-89C5-197A26D416C4"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:9.0.246.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84B367AC-E1E1-4BC5-8BF4-D5B517C0CA7C"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:9.0.260.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0A9C054-1F82-41DD-BE13-2B71B6F87F22"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:9.0.262.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7CB0781E-D5B5-4576-ABD4-0EE1C0C3DF12"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "40F70DB5-7ABD-44DD-9BC4-FDA403D009FB",
"versionEndIncluding": "10.1.92.10"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "08E4028B-72E7-4E4A-AD0F-645F5AACAA29"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA646396-7C10-45A0-89A9-C75C5D8AFB3E"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:10.0.15.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "476BB487-150A-4482-8C84-E6A2995A97E1"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:10.0.22.87:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3555324F-40F8-4BF4-BE5F-52A1E22B3AFA"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:10.0.32.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "60540FDE-8C31-4679-A85E-614B1EFE1FF0"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:10.0.42.34:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE652520-B693-47F1-A342-621C149A7430"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:10.0.45.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D0EC3272-8E1E-4415-A254-BB6C7FB49BEC"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:10.1.52.14.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0CF5AF16-A4F2-4E65-ADA8-DE11BE1F198D"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:10.1.52.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F7DF88E7-1A67-447C-BCF8-5C5564002207"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:10.1.53.64:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "460A0D6C-3A06-4910-B1E5-375E12F64F6E"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:10.1.82.76:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "950D8316-8117-4C09-A2A9-B34191957D32"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:10.1.85.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5484DE8-3CB1-4591-BF30-0D5E255034E0"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:10.1.92.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "02EBACEB-1266-4A2C-A47E-066D12EE5B96"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:10.1.95.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CCC09395-A9C7-4D7F-9B55-3120A84CB427"
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:10.1.95.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C2A6BBE-6033-4EF2-B890-9BD8867CC65A"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"evaluatorComment": "Per: http://cwe.mitre.org/data/definitions/426.html\r\n\r\n'CWE-426: Untrusted Search Path'",
"sourceIdentifier": "psirt@adobe.com"
}