CVE-2010-3151: Untrusted search path vulnerability in Adobe On Location CS4 Build 315 allows local users, and possibly rem...

Security readout for executives and security teams

CVE-2010-3151 is a legacy Adobe OnLocation CS4 issue where opening a project from an unsafe folder could load a malicious DLL placed beside it. The sources describe arbitrary code execution through DLL hijacking. There is no KEV listing or source evidence of current active exploitation. Exposure is most likely on legacy Windows workstations that still have Adobe OnLocation CS4 Build 315 and open OLPROJ files from shared, downloaded, or attacker-writable folders. Treat this as a targeted legacy-software risk. It is not KEV-listed, but public exploit references and arbitrary code execution justify cleanup where Adobe OnLocation CS4 remains installed. Mitigation focus: Check Adobe or vendor guidance for any update, workaround, or retirement path.; Remove or isolate Adobe OnLocation CS4 Build 315 where business use is no longer required.; Open OLPROJ files only from trusted, access-controlled local folders..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.