CVE-2016-4158
HighSummary
CVE-2016-4158 describes an unquoted Windows search path vulnerability in the Adobe Creative Cloud Desktop Application before version 3.7.0.272. This allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.
Risk Assessment
Organizations may be exposed to unauthorized access to systems, potentially leading to privilege escalation and security data breaches.
Recommendation
It is recommended to update the Adobe Creative Cloud Desktop Application to version 3.7.0.272 or later to mitigate this vulnerability.
Other vulnerabilities in Adobe Creative Cloud Desktop Application
See all- CVE-2016-6935High
The CVE-2016-6935 vulnerability in Adobe Creative Cloud Desktop Application before version 3.8.0.310 on Windows involves an unquoted search path issue. This allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.
- CVE-2016-4157High
CVE-2016-4157 describes an untrusted search path vulnerability in the installer of Adobe Creative Cloud Desktop Application before version 3.7.0.272 on Windows, allowing local users to gain privileges via a Trojan horse resource in an unspecified directory.
- CVE-2016-1034Critical
The Sync Process in the JavaScript API for Creative Cloud Libraries in Adobe Creative Cloud Desktop Application before version 3.6.0.244 allows remote attackers to read or write to arbitrary files via unspecified vectors.
Original NVD description (English source)
Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.