PT-2012-1480 · Adobe · Device Central Cs4

Publicado 2012-09-07 · Atualizado 2012-09-07 · CVE-2010-5270

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Device Central CS4 version 2.0.0

Description The issue allows local users to gain privileges via a Trojan horse ibfs32.dll or amt cdb.dll file in the current working directory, as demonstrated by a directory that contains a .adcp file.

Recommendations For Adobe Device Central CS4 version 2.0.0, consider removing or restricting access to the ibfs32.dll and amt cdb.dll files in the current working directory to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2010-5270

Produtos afetados

Device Central Cs4

Referências · 3

• http://secunia.com/advisories/42525 · Aviso do Fabricante
• http://coresecurity.com/content/adobe-device-central-cs4-ibfs32-dll-hijacking-exploit-10-5 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-5270 · Nota de Segurança