459 matches found
PT-2017-15175
Name of the Vulnerable Software and Affected Versions PrimeDrive Desktop Application versions 1.4.3 and earlier Description The issue allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory. This is due to an untrusted search path vulnerability. Recommendatio...
Adobe Creative Cloud desktop application 4. 0. 0. 185 elevation of privilege vulnerability, CVE-2017-3006）
Adobe CC uses weak insecure permissions settings on the "Adobe Photoshop dll & Startup Scripts" directories. This may allow authenticated users to execute arbitrary code in the security context of ANY other users with elevated privileges on the affected system. Issue is the 'C' flag Change for...
Adobe Creative Cloud Desktop Application 4.0.0.185 Privilege Escalation Vulnerability
Adobe Creative Cloud Desktop Application versions 4.0.0.185 and below suffers from a privilege escalation vulnerability. + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ADOBE-CREATIVE-CLOUD-PRIVILEGE-ESCALATION.txt + ISR:...
JVN#88713190: PrimeDrive Desktop Application Installer may insecurely load Dynamic Link Libraries
PrimeDrive Desktop Application is the client application for PrimeDrive online storage service provided by SoftBank Corp. The installer of PrimeDrive Desktop Application is vulnerable to load specific Dynamic Link Libraries in the same directory CWE-427 . Impact Arbitrary code may be executed wit...
CVE-2016-6935: Unquoted Search Path or Element
Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.8.0.310 on Windows allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory...
PT-2016-7178
Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application versions prior to 3.8.0.310 Description The issue allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory. This is due to an unquoted Windows search path...
Adobe Releases Security Updates
Adobe has released security updates to address vulnerabilities in Flash Player and the Creative Cloud Desktop Application. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review Adobe...
CVE-2016-4157
Untrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse resource in an unspecified directory...
CVE-2016-4157
CVE-2016-4157 affects Adobe Creative Cloud Desktop Application for Windows prior to 3.7.0.272. The issue is an untrusted search path vulnerability in the installer , enabling local users to gain privileges via a Trojan horse resource in an unspecified directory. This CVE is part of a set describe...
CVE-2016-4158: Undefined Security Weakness
Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory...
CVE-2016-4157: Undefined Security Weakness
Untrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse resource in an unspecified directory...
PT-2016-5854
Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application versions prior to 3.7.0.272 Description The issue allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory due to an unquoted Windows search path...
PT-2016-5853
Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application versions prior to 3.7.0.272 Description The issue is related to an untrusted search path vulnerability in the installer of the Adobe Creative Cloud Desktop Application. This vulnerability allows local...
Adobe Creative Cloud Desktop Application Unreferenced Service Path Enumeration Vulnerability
Adobe Creatie Cloud Desktop is a suite of applications for managing applications and services in the Creative Cloud Membership Management Center from Adobe USA. The program supports synchronizing and sharing files, managing fonts, and accessing asset libraries for commercial photography and desig...
APSB16-21 Security update available for the Creative Cloud Desktop Application
Adobe has released a security update for the Creative Cloud Desktop Application for Windows. This update resolves an untrusted search path vulnerability in the Creative Cloud Desktop Application installer, and an unquoted service path enumeration vulnerability in the Creative Cloud Desktop...
Design/Logic Flaw
The Sync Process in the JavaScript API for Creative Cloud Libraries in Adobe Creative Cloud Desktop Application before 3.6.0.244 allows remote attackers to read or write to arbitrary files via unspecified vectors...
CVE-2016-1034: Undefined Security Weakness
The Sync Process in the JavaScript API for Creative Cloud Libraries in Adobe Creative Cloud Desktop Application before 3.6.0.244 allows remote attackers to read or write to arbitrary files via unspecified vectors...
APSB16-11 Security update available for the Creative Cloud Desktop Application
Adobe has released a security update for the Creative Cloud Desktop Application for Windows and Macintosh. This update resolves an important vulnerability in the Sync Process for Creative Cloud Libraries that could be abused to remotely read and write files on the client’s file system...
PT-2016-4583
Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application versions prior to 3.6.0.244 Description The issue allows remote attackers to read or write to arbitrary files via unspecified vectors in the Sync Process of the JavaScript API for Creative Cloud...
