CVE-2016-4157
HighSummary
CVE-2016-4157 describes an untrusted search path vulnerability in the installer of Adobe Creative Cloud Desktop Application before version 3.7.0.272 on Windows, allowing local users to gain privileges via a Trojan horse resource in an unspecified directory.
Risk Assessment
Organizations may be exposed to unauthorized access to systems, potentially leading to privilege escalation and security-related damages.
Recommendation
It is recommended to update the Adobe Creative Cloud Desktop Application to the latest version to mitigate this vulnerability and to monitor systems for unauthorized changes.
Other vulnerabilities in Adobe Creative Cloud Desktop Application
See all- CVE-2016-6935High
The CVE-2016-6935 vulnerability in Adobe Creative Cloud Desktop Application before version 3.8.0.310 on Windows involves an unquoted search path issue. This allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.
- CVE-2016-4158High
CVE-2016-4158 describes an unquoted Windows search path vulnerability in the Adobe Creative Cloud Desktop Application before version 3.7.0.272. This allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.
- CVE-2016-1034Critical
The Sync Process in the JavaScript API for Creative Cloud Libraries in Adobe Creative Cloud Desktop Application before version 3.6.0.244 allows remote attackers to read or write to arbitrary files via unspecified vectors.
Original NVD description (English source)
Untrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse resource in an unspecified directory.