CVE-2018-15976

Опубликовано: 17 окт. 2018

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

Adobe Technical Communications Suite versions 1.0.5.1 and below have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.

Ссылки

http://www.securityfocus.com/bid/105535
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041819
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041820
Third Party Advisory
VDB Entry
https://helpx.adobe.com/security/products/techcommsuite/apsb18-38.html
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/151000
Third Party Advisory
http://www.securityfocus.com/bid/105535
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041819
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041820
Third Party Advisory
VDB Entry
https://helpx.adobe.com/security/products/techcommsuite/apsb18-38.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:adobe:technical_communications_suite:*:*:*:*:*:*:*:*

Версия до 1.0.5.1 (включая)

EPSS

Процентиль: 84%

0.02148

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-427

Связанные уязвимости

GHSA-mg38-3fg7-fqp2