CVE-2010-3975
Untrusted search path vulnerability in Adobe Flash Player 9 allows local users, and possibly...
Untrusted search path vulnerability in Adobe Flash Player 9 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse schannel.dll that is located in the same folder as a file that is processed by Flash.
Exploit likelihood
What each source reports
NVD Score used
Untrusted search path vulnerability in Adobe Flash Player 9 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse schannel.dll that is located in the same folder as a file that is processed by Flash.
- Record
CVE-2010-3975- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Untrusted search path vulnerability in Adobe Flash Player 9 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse schannel.dll that is located in the same folder as a file that is processed by Flash.
- Record
CVE-2010-3975- Updated
- 2026-11-02
EUVDEUVD-2010-3952 No score
Untrusted search path vulnerability in Adobe Flash Player 9 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse schannel.dll that is located in the same folder as a file that is processed by Flash.
- Record
EUVD-2010-3952- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6hc8-r2j3-8r4p No score
Untrusted search path vulnerability in Adobe Flash Player 9 allows local users, and possibly...
Untrusted search path vulnerability in Adobe Flash Player 9 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse schannel.dll that is located in the same folder as a file that is processed by Flash.
- Record
GHSA-6hc8-r2j3-8r4p- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3975 is a high vulnerability (CVSS 9.3) in Adobe Flash Player, published October 19, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.68%, the 93rd percentile. No source names a fixed version.