Home

CVE-2016-4158

Description

Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.

Risk Information

Base Score
7.3
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
1.636

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in Adobe Creative Cloud (x64) 3.6.0.248Windows
Multiple vulnerabilities affected in Adobe Creative Cloud 3.6.0.248Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234