CVE-2010-3402

CVE-2010-3402 is an untrusted search path vulnerability affecting IDM Computer Solutions UltraEdit versions 16.20.0.1009, 16.10.0.1036, and potentially others. This flaw allows local users, and possibly remote attackers, to execute arbitrary code through DLL hijacking by placing a malicious dwmapi.dll file in the same directory as specific project or data files. With a CVSS score of 9.3, this vulnerability is considered critical due to its network attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, nor significant community discussion or media coverage.