CVE-2010-3142

CVE-2010-3142 is an untrusted search path vulnerability affecting Microsoft Office PowerPoint 2007, allowing local or potentially remote attackers to execute arbitrary code through DLL hijacking. This occurs when a malicious rpawinet.dll is placed in the same directory as a PowerPoint file. The vulnerability has a critical CVSS score of 9.3, indicating a network-based attack with medium complexity that can lead to complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, exploit code for this specific DLL hijacking scenario is available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.