CVE-2016-4118

Опубликовано: 30 мая 2016

Источник: nvd

CVSS3: 7.8

CVSS2: 7.2

EPSS Низкий

Описание

Untrusted search path vulnerability in the installer in Adobe Connect Add-In before 11.9.976.291 on Windows allows local users to gain privileges via unspecified vectors.

Ссылки

http://www.securityfocus.com/bid/90815
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1035958
Third Party Advisory
VDB Entry
https://helpx.adobe.com/security/products/connect/apsb16-17.html
Vendor Advisory
http://www.securityfocus.com/bid/90815
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1035958
Third Party Advisory
VDB Entry
https://helpx.adobe.com/security/products/connect/apsb16-17.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

cpe:2.3:a:adobe:connect:*:*:*:*:*:*:*:*

Версия до 9.5.2 (включая)

EPSS

Процентиль: 70%

0.00635

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-3jvm-p6c5-56xr