CVE-2010-3153

CVE-2010-3153 is an untrusted search path vulnerability affecting Adobe InDesign CS4, InDesign CS5, InDesign Server CS5, and InCopy CS5. It allows local users, and potentially remote attackers, to execute arbitrary code through DLL hijacking by placing a malicious ibfs32.dll file in the same directory as specific InDesign project files. This vulnerability carries a critical CVSS score of 9.3, indicating a high potential for complete compromise of confidentiality, integrity, and availability, with a network attack vector and medium attack complexity. While not listed on the KEV catalog, exploit code for DLL hijacking is publicly available on ExploitDB, though there is no evidence of widespread active exploitation or significant community discussion.