CVE-2010-3141: Critical severity Microsoft PowerPoint vulnerability

Published Aug 27, 2010

Updated

Untrusted search path vulnerability in Microsoft PowerPoint 2010 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse pptimpconv.dll that is located in the same folder as a .odp, .pot, .potm, .potx, .ppa, .pps, .ppsm, .ppsx, .ppt, .pptm, .pptx, .pwz, .sldm, or .sldx file.

Affected Software

1 affected component

Microsoft PowerPoint=2010

Event History

Aug 27, 2010

CVE Published

via MITRE·06:10 PM

Data Sourced

via MITRE·06:10 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-3141?

CVE-2010-3141 has a severity rating that can allow local users and possibly remote attackers to execute arbitrary code.

How do I fix CVE-2010-3141?

Fixing CVE-2010-3141 involves updating Microsoft PowerPoint to the latest version that addresses this vulnerability.

What types of files are associated with CVE-2010-3141?

CVE-2010-3141 is associated with file types such as .odp, .pot, .potm, .potx, .ppa, .pps, .ppsm, and .ppsx.

Can CVE-2010-3141 be exploited remotely?

Yes, CVE-2010-3141 can potentially be exploited by remote attackers through crafted files.

Which version of PowerPoint is affected by CVE-2010-3141?

CVE-2010-3141 affects Microsoft PowerPoint version 2010.