CVE-2016-4158: High severity microsoft windows operating system vulnerability
Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4158?
CVE-2016-4158 has a medium severity rating due to its potential for local privilege escalation.
How do I fix CVE-2016-4158?
To fix CVE-2016-4158, update Adobe Creative Cloud Desktop Application to version 3.7.0.272 or later.
Who is affected by CVE-2016-4158?
CVE-2016-4158 affects local users of Adobe Creative Cloud Desktop Application versions before 3.7.0.272 on Microsoft Windows.
What is the nature of the vulnerability in CVE-2016-4158?
CVE-2016-4158 is an unquoted Windows search path vulnerability that allows privilege escalation through a Trojan horse executable.
What is the exploit method for CVE-2016-4158?
CVE-2016-4158 can be exploited by placing a Trojan horse executable in the %SYSTEMDRIVE% directory to gain elevated privileges.