CVE-2021-38546

CREATIVE Pebble devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, the intensit...

CVE-2021-38546

The CVE-2021-38546 entry covers Creative Pebble devices affected by a Glowworm-style attack. According to redhat and NVD records, remote attackers can recover spoken audio by measuring power-indicator LED emissions with an electro-optical sensor and telescope. The underlying issue links LED outpu...

CVE-2021-38546

CREATIVE Pebble devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, the intensit...

PT-2021-22201

Name of the Vulnerable Software and Affected Versions CREATIVE Pebble devices through 2021-08-09 Description The issue allows remote attackers to recover speech signals from an LED on the device via a telescope and an electro-optical sensor, known as a "Glowworm" attack. This is possible because...

CVE-2021-38546: Undefined Security Weakness

CREATIVE Pebble devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, the intensit...

Phish Swims Past Email Security with Milanote Pages

The Milanote app, billed as the “Evernote for creatives” by reviewers, has attracted the notice of cybercriminals who are abusing it to carry out credential-stealing campaigns that skate past secure email gateways SEGs, researchers said. Milanote is a tool for organizing and collaborating on...

CVE-2021-28613

Adobe Creative Cloud Desktop Application version 5.4 and earlier is affected by a file handling vulnerability that could allow an attacker to arbitrarily overwrite a file. Exploitation of this issue requires local access, administrator privileges and user interaction...

Creative Cloud Desktop Application 安全漏洞

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An arbitrary file system write vulnerability exists in Adobe Creative Cloud Desktop Application 2.4 and earlier versions. The vulnerability originates from the creation of...

Creative Cloud Desktop Application 代码问题漏洞

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An uncontrolled search path element vulnerability exists in Adobe Creative Cloud Desktop Application 2.4 and earlier versions. An attacker can exploit this vulnerability to...

Adobe Creative Cloud Desktop Application Uncontrolled Search Path Element Vulnerability

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An uncontrolled search path element vulnerability exists in Adobe Creative Cloud Desktop Application 2.4 and earlier versions. An attacker can exploit this vulnerability to...

Adobe Creative Cloud Desktop Application Arbitrary File System Write Vulnerability

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An arbitrary file system write vulnerability exists in Adobe Creative Cloud Desktop Application 2.4 and earlier versions. The vulnerability originates from the creation of...

Vulnerabilities fixed in Adobe products

Several vulnerabilities have been fixed in several Adobe products. The vulnerabilities allow a malicious person to perform attacks that result in the following categories of damage: Denial-of-Service DoS Remote code execution User Rights Increased user privileges The exact damage varies by...

CVE-2021-28594

Adobe Creative Cloud Desktop Application installer version 2.4 and earlier is affected by an Uncontrolled Search Path Element vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this...

CVE-2021-28633

Adobe Creative Cloud Desktop Application installer version 2.4 and earlier is affected by an Insecure temporary file creation vulnerability. An attacker could leverage this vulnerability to cause arbitrary file overwriting in the context of the current user. Exploitation of this issue requires...

PT-2021-6643 · Adobe · Adobe Creative Cloud Desktop Application

Name of the Vulnerable Software and Affected Versions: Adobe Creative Cloud Desktop Application version 2.4 and earlier Description: The issue is related to an insecure temporary file creation, which could allow an attacker to overwrite arbitrary files in the context of the current user...

PT-2021-5602

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application installer version 2.4 and earlier Description The issue is related to an Uncontrolled Search Path Element. An unauthenticated attacker could leverage this to achieve arbitrary code execution in the...

APSB21-41 Security update available for Adobe Creative Cloud Desktop Application

Adobe has released an update for the Creative Cloud Desktop installer for Windows and macOS. This update includes a fix for a critical and an important vulnerability that could lead to arbitrary code execution in the context of current user...

How to Tell a Job Offer from an ID Theft Trap

One of the oldest scams around -- the fake job interview that seeks only to harvest your personal and financial data -- is on the rise, the FBI warns. Heres the story of a recent LinkedIn impersonation scam that led to more than 100 people getting duped, and one almost-victim who decided the job...

Vulnerabilities fixed in Adobe products

Adobe has fixed several vulnerabilities in After Effects, Creative Cloud, Illustrator, InDesign and Media Encoder. The vulnerabilities potentially allow a malicious party to launch attacks execute attacks that result in the following categories of damage: Remote code execution User rights. Access...

Adobe Creative Cloud Desktop < 5.4.3 Privilege Escalation (APSB21-31)

The version of Adobe Creative Cloud Desktop installed on the remote Windows host is prior to version 5.4.3. It is, therefore, affected by a privilege escalation vulnerability due to an uncontrolled search path element. Note that Nessus has not tested for this issue but has instead relied only on...