CVE-2016-6935: High severity adobe creative cloud vulnerability
Published Oct 13, 2016
·Updated
Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.8.0.310 on Windows allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.
Affected Software
1 affected component
Adobe Creative Cloud<=3.7.0.272
Event History
Oct 13, 2016
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-6935?
CVE-2016-6935 is classified as a medium severity vulnerability.
2
How do I fix CVE-2016-6935?
To fix CVE-2016-6935, upgrade Adobe Creative Cloud Desktop Application to version 3.8.0.310 or later.
3
Who is affected by CVE-2016-6935?
Local users of Adobe Creative Cloud versions prior to 3.8.0.310 on Windows are affected by CVE-2016-6935.
4
What can attackers do with CVE-2016-6935?
Attackers can exploit CVE-2016-6935 to gain elevated privileges by placing a Trojan horse executable in the %SYSTEMDRIVE% directory.
5
Is there a workaround for CVE-2016-6935?
There are no published workarounds for CVE-2016-6935; updating to a fixed version is recommended.