CVE-2018-15974

Опубликовано: 17 окт. 2018

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

Adobe Framemaker versions 1.0.5.1 and below have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.

Ссылки

http://www.securityfocus.com/bid/105537
Third Party Advisory
VDB Entry
https://helpx.adobe.com/security/products/framemaker/apsb18-37.html
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/151002
VDB Entry
Third Party Advisory
http://www.securityfocus.com/bid/105537
Third Party Advisory
VDB Entry
https://helpx.adobe.com/security/products/framemaker/apsb18-37.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:adobe:framemaker:*:*:*:*:*:*:*:*

Версия до 14.0.361 (включая)

EPSS

Процентиль: 83%

0.01914

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-426

Связанные уязвимости

GHSA-gjqm-xj5v-7cvf