CVE-2016-6935 Privilege escalation in n/a
Local attackers can gain privileges by placing a malicious executable in the system drive due to unquoted search paths in Adobe Creative Cloud.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-6935?
CVE-2016-6935 is a high-severity vulnerability in n/a, published on 13 Oct 2016. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.8.0.310 on Windows allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.
Weakness: CWE-428
Which versions are affected by CVE-2016-6935?
It affects 1 product.
Products include Adobe Creative Cloud.
How do I fix CVE-2016-6935?
No fix has been published for CVE-2016-6935 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-6935 being exploited?
There is no known exploitation of CVE-2016-6935 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2020-9669 Privilege escalation in Adobe Creative Cloud Desktop Application
- CVE-2019-8236 Privilege escalation in Adobe Creative Cloud Desktop application
- CVE-2019-7958 Privilege escalation in Creative Cloud Desktop Application
- CVE-2019-7959 Supply chain in Creative Cloud Desktop Application
- CVE-2018-12829 Security feature bypass in Adobe Creative Cloud Desktop Application before 4.6.1
Sources
Also known as GHSA-mhv4-fqqh-2p7m.