First published: Tue Apr 12 2016(Updated: )
The Sync Process in the JavaScript API for Creative Cloud Libraries in Adobe Creative Cloud Desktop Application before 3.6.0.244 allows remote attackers to read or write to arbitrary files via unspecified vectors.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Creative Cloud | <=3.5.1.209 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-1034 is rated as important due to its potential impact on file integrity and security.
To remediate CVE-2016-1034, update Adobe Creative Cloud Desktop Application to version 3.6.0.244 or later.
CVE-2016-1034 can allow attackers to read or write to arbitrary files on the affected system.
Yes, CVE-2016-1034 can be exploited by remote attackers through unspecified vectors.
CVE-2016-1034 affects Adobe Creative Cloud versions up to and including 3.5.1.209.