CVE-2010-3155

CVE-2010-3155 describes an untrusted search path vulnerability in Adobe ExtendScript Toolkit (ESTK) CS5 3.5.0.52, allowing local or potentially remote attackers to execute arbitrary code. This is achieved through DLL hijacking by placing a malicious dwmapi.dll file in the same directory as a .jsx file. The vulnerability carries a critical CVSS score of 9.3, indicating a high impact with complete compromise of confidentiality, integrity, and availability, and an attack complexity of medium. While not listed in CISA's KEV catalog, exploit code for this specific DLL hijacking technique is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.