Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q677-9v9j-jjwq

Опубликовано: 18 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Lightroom Desktop versions 7.1.2 and earlier are affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses a search path to locate critical resources such as programs, then an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Lightroom Desktop versions 7.1.2 and earlier are affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses a search path to locate critical resources such as programs, then an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

EPSS

Процентиль: 31%
0.0012
Низкий

7.5 High

CVSS3

Дефекты

CWE-426

Связанные уязвимости

CVSS3: 7.8
nvd
почти 2 года назад

Lightroom Desktop versions 7.1.2 and earlier are affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses a search path to locate critical resources such as programs, then an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS3: 7.5
fstec
почти 2 года назад

Уязвимость графического редактора Adobe Lightroom, связанная с использованием ненадёжного пути поиска, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 31%
0.0012
Низкий

7.5 High

CVSS3

Дефекты

CWE-426