CVE-2010-5241 describes multiple untrusted search path vulnerabilities in Autodesk AutoCAD 2010, allowing local privilege escalation. An attacker could place a malicious dwmapi.dll or IBFS32.DLL file in a directory containing a .dwg file, leading to the execution of arbitrary code when AutoCAD is launched. With a CVSS score of 6.9, this vulnerability has a high impact on confidentiality, integrity, and availability, requiring local access and medium attack complexity. While there is an ExploitDB entry for a similar DLL hijacking vulnerability in AutoCAD 2007, there is no evidence of active exploitation for CVE-2010-5241, nor is it listed in CISA's KEV catalog, and it has received no community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2010CPE matchmatch criteria | cpe:2.3:a:autodesk:autocad:2010:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:M/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.