CVE-2010-3154

CVE-2010-3154 describes an untrusted search path vulnerability in Adobe Extension Manager CS5 5.0.298. This flaw allows local users, and potentially remote attackers, to execute arbitrary code through DLL hijacking by placing a malicious dwmapi.dll file in the same directory as a .mxi or .mxp file. With a CVSS score of 9.3, this vulnerability is critical, indicating a network-based attack with medium complexity that can lead to complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, exploit code for DLL hijacking is publicly available via ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.