Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-59wj-g52m-96w6

Опубликовано: 17 фев. 2022
Источник: github
Github: Не прошло ревью

Описание

Adobe Creative Cloud Desktop version 2.7.0.13 (and earlier) is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must download a malicious DLL file. The attacker has to deliver the DLL on the same folder as the installer which makes it as a high complexity attack vector.

Adobe Creative Cloud Desktop version 2.7.0.13 (and earlier) is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must download a malicious DLL file. The attacker has to deliver the DLL on the same folder as the installer which makes it as a high complexity attack vector.

EPSS

Процентиль: 91%
0.07288
Низкий

Дефекты

CWE-427

Связанные уязвимости

CVSS3: 7
nvd
почти 4 года назад

Adobe Creative Cloud Desktop version 2.7.0.13 (and earlier) is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must download a malicious DLL file. The attacker has to deliver the DLL on the same folder as the installer which makes it as a high complexity attack vector.

CVSS3: 7
fstec
почти 4 года назад

Уязвимость приложения графического редактора для рабочего стола Adobe Creative Cloud Desktop Application, связанная с неконтролируемым элементом пути поиска, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 91%
0.07288
Низкий

Дефекты

CWE-427