| |
Vulnerability CVE-2019-7956
Published: 2019-07-18 Modified: 2019-07-19
| Description: |
Adobe Dreamweaver direct download installer versions 19.0 and below, 18.0 and below have an Insecure Library Loading (DLL hijacking) vulnerability. Successful exploitation could lead to Privilege Escalation in the context of the current user. |
Type:
CWE-426 (Untrusted Search Path)
CVSS2 => (AV:N/AC:M/Au:N/C:P/I:P/A:P)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
6.8/10 |
6.4/10 |
8.6/10 |
| Exploit range |
Attack complexity |
Authentication |
Remote |
Medium |
No required |
| Confidentiality impact |
Integrity impact |
Availability impact |
Partial |
Partial |
Partial |
References: |
https://helpx.adobe.com/security/products/dreamweaver/apsb19-40.html
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
