Vulnerabilities for Creative cloud desktop application (...) - CXSECURITY.COM

Vulnerabilities for
'Creative cloud desktop application'

2022-02-16

CVE-2022-23202

CWE-427

Adobe Creative Cloud Desktop version 2.7.0.13 (and earlier) is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must download a malicious DLL file. The attacker has to deliver the DLL on the same folder as the installer which makes it as a high complexity attack vector.

2021-08-24

CVE-2021-28594

CWE-427

Adobe Creative Cloud Desktop Application (installer) version 2.4 (and earlier) is affected by an Uncontrolled Search Path Element vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2021-28633

NVD-CWE-Other

Adobe Creative Cloud Desktop Application (installer) version 2.4 (and earlier) is affected by an Insecure temporary file creation vulnerability. An attacker could leverage this vulnerability to cause arbitrary file overwriting in the context of the current user. Exploitation of this issue requires physical interaction to the system.

2021-03-12

CVE-2021-21068

CWE-379

Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by a file handling vulnerability that could allow an attacker to cause arbitrary file overwriting. Exploitation of this issue requires physical access and user interaction.

>>> Vendor: Adobe 146 Products

Acrobat business tools

Digital editions

Adobe content server

Shockwave player

Flash media server

Document server

Graphics server

Livecycle form manager

Download manager

Breeze licensed server

Adobe php ria sdk

Robohelp server

Photoshop elements

Connect enterprise server

Flash media server 2

Livecycle workflow

Flash playe for linux

Flash player for linux

Flex data services

Lifecycle data services

Device central cs5

Premier pro cs4

Extension manager cs5

Extendedscript toolkit cs5

Livecycle data services

Flash player for android

Illustrator cs5.5

Photoshop cs5.5

Livecycle designer es2

Livecycle designer

Device central cs4

Acrobat r2000eader

Adobe air sdk and compiler

Photoshop cs5.1

Air sdk & compiler

Air sdk and compiler

Acrobat reader dc

Air sdk \& compiler

Experience manager

See all Products for Vendor Adobe

Copyright 2024, cxsecurity.com