PT-2016-1979 · Adobe · Acrobat+1

Publicado 2016-05-05 · Atualizado 2016-12-01 · CVE-2016-1087

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Adobe Reader versions (affected versions not specified) Adobe Acrobat versions (affected versions not specified)

Description The issue is related to the use of an insecure search path in Adobe Reader and Adobe Acrobat. This could allow a local attacker to elevate privileges by using a Trojan file in an uninstalled directory. The vulnerability enables attackers to execute code.

Recommendations For Adobe Reader, consider restricting access to uninstalled directories to minimize the risk of exploitation. For Adobe Acrobat, avoid using untrusted files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Untrusted Search Path

Enumeração de Fraquezas

CWE-426

Identificadores relacionados

BDU:2016-01312

CVE-2016-1087

Produtos afetados

Acrobat

Reader

Referências · 7

• http://securitytracker.com/id/1035828 · Nota
• https://helpx.adobe.com/security/products/acrobat/apsb16-14.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2016-01312 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-1087 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-1087 · Nota de Segurança
• http://securityfocus.com/bid/90513 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1087 · Nota