This host is installed with Adobe Flash Player and is prone to untrusted search path vulnerability.

Successful exploitation will allow attackers to trigger user to save a malicious dll file in users Desktop. Impact Level: Application/System.

Upgrade to Adobe Flash Player version 10.1.102.64 or later. For updates refer to http://www.adobe.com/support/flashplayer/downloads.html

The application passes an insufficiently qualified path in loading its external libraries 'dwmapi.dll'.

Adobe Flash Player version 10.1.0 through 10.1.82.76

• http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/[flash_player]_10.1.x_insecure_dll_hijacking_(dwmapi.dll)
• http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-09/msg00070.html

---

Updated on 2015-03-25