CVE-2016-1034
CriticalSummary
The Sync Process in the JavaScript API for Creative Cloud Libraries in Adobe Creative Cloud Desktop Application before version 3.6.0.244 allows remote attackers to read or write to arbitrary files via unspecified vectors.
Risk Assessment
Attackers may gain access to sensitive data or make unauthorized changes to the system, potentially leading to serious security breaches.
Recommendation
It is recommended to update the Adobe Creative Cloud Desktop Application to the latest version to mitigate this vulnerability.
Other vulnerabilities in Adobe Creative Cloud Desktop Application
See all- CVE-2016-6935High
The CVE-2016-6935 vulnerability in Adobe Creative Cloud Desktop Application before version 3.8.0.310 on Windows involves an unquoted search path issue. This allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.
- CVE-2016-4158High
CVE-2016-4158 describes an unquoted Windows search path vulnerability in the Adobe Creative Cloud Desktop Application before version 3.7.0.272. This allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.
- CVE-2016-4157High
CVE-2016-4157 describes an untrusted search path vulnerability in the installer of Adobe Creative Cloud Desktop Application before version 3.7.0.272 on Windows, allowing local users to gain privileges via a Trojan horse resource in an unspecified directory.
Original NVD description (English source)
The Sync Process in the JavaScript API for Creative Cloud Libraries in Adobe Creative Cloud Desktop Application before 3.6.0.244 allows remote attackers to read or write to arbitrary files via unspecified vectors.