CVE-2010-3135

CVE-2010-3135 describes an untrusted search path vulnerability in Cisco Packet Tracer 5.2. This flaw allows local users, and potentially remote attackers, to execute arbitrary code through a DLL hijacking attack. By placing a malicious wintab32.dll file in the same directory as a .pkt or .pkz file, an attacker can trick the application into loading the rogue DLL. The vulnerability has a critical CVSS score of 9.3, indicating a high severity due to its network-based attack vector, medium complexity, and complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog or Hot List, an ExploitDB entry (EDB-14774) confirms the availability of exploit code, though there is minimal community discussion or media coverage.