CVE-2010-1254

CVE-2010-1254 describes a vulnerability in the Microsoft Open XML File Format Converter for Mac, where insecure Access Control Lists (ACLs) are set for the /Applications folder. This flaw allows a local attacker to execute arbitrary code by replacing legitimate executables with malicious ones, effectively creating a "Trojan Horse." The vulnerability has a CVSS score of 6.9, indicating high severity due to complete confidentiality, integrity, and availability impacts, with a medium attack complexity requiring local access. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.