CVE-2018-4992

Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper input validation vulnerability. Successful exploitation could lead to local privilege escalation...

CVE-2018-4991

Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper certificate validation vulnerability. Successful exploitation could lead to a security bypass...

Input validation

Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper input validation vulnerability. Successful exploitation could lead to local privilege escalation...

Input validation

Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper certificate validation vulnerability. Successful exploitation could lead to a security bypass...

CVE-2018-4991

Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper certificate validation vulnerability. Successful exploitation could lead to a security bypass...

CVE-2018-4992

Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper input validation vulnerability. Successful exploitation could lead to local privilege escalation...

CVE-2018-4873

CVE-2018-4873 affects Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier. The root cause is an unquoted search path, enabling local privilege escalation if exploited. Public sources describe this as an elevation of privilege vulnerability in Creative Cloud with potential impa...

CVE-2018-4991

Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable improper certificate validation vulnerability (CVE-2018-4991) that could lead to a security bypass. Affected product: Creative Cloud Desktop. Root cause: improper certificate validation. Impact: security b...

CVE-2018-4992

Adobe Creative Cloud Desktop Application 4.4.1.298 and earlier is vulnerable to an improper input validation flaw (CVE-2018-4992) that could lead to local privilege escalation; CVE-2018-4991 and CVE-2018-4873 are related issues noted in the APSB18-12 advisory. The OpenVAS/NVD entries corroborate ...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Adobe Connect, Adobe Flash Player, and Adobe Creative Cloud Desktop Application. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC encourages users and administrators to revi...

[SECURITY] Fedora 27 Update: torbrowser-launcher-0.2.9-1.fc27

Tor Browser Launcher is intended to make Tor Browser easier to install and use for GNU/Linux users. You install torbrowser-launcher from your distribution's package manager and it handles everything else: Downloads and installs the most recent version of Tor Browser in your lan guage and for your...

Gdk-Pixbuf JPEG gdk_pixbuf__jpeg_image_load_increment Code Execution Vulnerability

Summary An exploitable heap overflow vulnerability exists in the gdkpixbufjpegimageloadincrement functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability. Tested...

SoftBank PrimeDrive Desktop Application Code Execution Vulnerability

SoftBank PrimeDrive Desktop Application is a set of client applications from SoftBank Japan that provide online storage services for PrimeDrive. A security vulnerability exists in SoftBank PrimeDrive Desktop Application 1.4.4 and earlier versions. An attacker can exploit the vulnerability to...

CVE-2017-2167

Untrusted search path vulnerability in Installer for PrimeDrive Desktop Application version 1.4.4 and earlier allows remote attackers to execute arbitrary code via a specially crafted executable file in an unspecified directory...

CVE-2017-2108

Untrusted search path vulnerability in PrimeDrive Desktop Application 1.4.3 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in PrimeDrive Desktop Application 1.4.3 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2108

CVE-2017-2108 affects PrimeDrive Desktop Application (1.4.3 and earlier). The vulnerability is an untrusted search path/DLL hijacking in the installer, allowing arbitrary code execution with the privileges of the user during installation via a Trojan horse DLL located in an unspecified directory ...

Adobe Creative Cloud desktop application 4. 0. 0. 185 elevation of privilege vulnerability, CVE-2017-3006）

Adobe CC uses weak insecure permissions settings on the "Adobe Photoshop dll & Startup Scripts" directories. This may allow authenticated users to execute arbitrary code in the security context of ANY other users with elevated privileges on the affected system. Issue is the 'C' flag Change for...

Adobe Creative Cloud Desktop Application 4.0.0.185 Privilege Escalation Vulnerability

Adobe Creative Cloud Desktop Application versions 4.0.0.185 and below suffers from a privilege escalation vulnerability. + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ADOBE-CREATIVE-CLOUD-PRIVILEGE-ESCALATION.txt + ISR:...

JVN#88713190: PrimeDrive Desktop Application Installer may insecurely load Dynamic Link Libraries

PrimeDrive Desktop Application is the client application for PrimeDrive online storage service provided by SoftBank Corp. The installer of PrimeDrive Desktop Application is vulnerable to load specific Dynamic Link Libraries in the same directory CWE-427 . Impact Arbitrary code may be executed wit...