PT-2012-1480 · Adobe · Device Central Cs4

Published 2012-09-07 · Updated 2012-09-07 · CVE-2010-5270

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Device Central CS4 version 2.0.0

Description The issue allows local users to gain privileges via a Trojan horse ibfs32.dll or amt cdb.dll file in the current working directory, as demonstrated by a directory that contains a .adcp file.

Recommendations For Adobe Device Central CS4 version 2.0.0, consider removing or restricting access to the ibfs32.dll and amt cdb.dll files in the current working directory to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2010-5270

Affected Products

Device Central Cs4

References · 3

• http://secunia.com/advisories/42525 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-5270 · Security Note
• http://coresecurity.com/content/adobe-device-central-cs4-ibfs32-dll-hijacking-exploit-10-5 · Note