CVE-2016-6935
HighSummary
The CVE-2016-6935 vulnerability in Adobe Creative Cloud Desktop Application before version 3.8.0.310 on Windows involves an unquoted search path issue. This allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.
Risk Assessment
Organizations may be exposed to unauthorized access to systems, potentially leading to privilege escalation and damage. Exploitation of this vulnerability by malware could threaten data integrity.
Recommendation
It is recommended to update the Adobe Creative Cloud Desktop Application to version 3.8.0.310 or later to mitigate this vulnerability. Additionally, monitor and restrict access to the %SYSTEMDRIVE% directory.
Other vulnerabilities in Adobe Creative Cloud Desktop Application
See all- CVE-2016-4158High
CVE-2016-4158 describes an unquoted Windows search path vulnerability in the Adobe Creative Cloud Desktop Application before version 3.7.0.272. This allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.
- CVE-2016-4157High
CVE-2016-4157 describes an untrusted search path vulnerability in the installer of Adobe Creative Cloud Desktop Application before version 3.7.0.272 on Windows, allowing local users to gain privileges via a Trojan horse resource in an unspecified directory.
- CVE-2016-1034Critical
The Sync Process in the JavaScript API for Creative Cloud Libraries in Adobe Creative Cloud Desktop Application before version 3.6.0.244 allows remote attackers to read or write to arbitrary files via unspecified vectors.
Original NVD description (English source)
Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.8.0.310 on Windows allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.