CVE-2010-3130

CVE-2010-3130 describes an untrusted search path vulnerability in TechSmith Snagit versions 10.x and 11.x. This flaw allows local users, and potentially remote attackers, to execute arbitrary code through a DLL hijacking attack. By placing a malicious dwmapi.dll file in the same directory as specific Snagit project files, an attacker can achieve full compromise of the affected system. While not actively exploited in the wild, public exploit code exists, demonstrating the feasibility of this high-severity vulnerability.