CVE-2010-3142: Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly re...

Security readout for executives and security teams

This issue lets code run when PowerPoint 2007 opens certain presentation-related files from a folder containing a malicious DLL. The business risk is highest where users handle files from email, downloads, shared folders, or removable media. Active exploitation is not shown in the provided sources. Exposure is limited to environments with Microsoft Office PowerPoint 2007 opening the listed file types from directories that an attacker can influence. The bundle does not provide CPEs, CVSS, or version ranges beyond PowerPoint 2007. Treat this as a legacy-document handling risk requiring targeted inventory and vendor-guided remediation. Escalate if PowerPoint 2007 is still used with external files, shared folders, or high-value users. Mitigation focus: Check Microsoft or vendor guidance for CVE-2010-3142 before assuming a patch path.; Identify and reduce PowerPoint 2007 use where business workflows permit.; Restrict opening presentation files from untrusted folders, shares, downloads, or removable media..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.