PT-2020-6495 · Adobe · Genuine Service

Published 2020-07-14 · Updated 2021-09-14 · CVE-2020-9681

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Genuine Service versions 6.6 and earlier

Description The issue is related to an Uncontrolled Search Path element vulnerability in the Adobe Genuine Service. This vulnerability can be exploited by an authenticated attacker to rewrite the administrator's file, potentially leading to elevated permissions. Exploitation requires user interaction. The vulnerability is also associated with an insecure procedure for searching DLL library paths, which can allow an attacker to increase their privileges.

Recommendations For Adobe Genuine Service versions 6.6 and earlier, update to a version later than 6.6 to resolve the issue. As a temporary workaround, consider restricting access to the administrator's file to minimize the risk of exploitation. Avoid using the vulnerable Adobe Genuine Service until the issue is resolved.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

BDU:2021-05391

CVE-2020-9681

Affected Products

Genuine Service

References · 6

• https://helpx.adobe.com/security/products/integrity_service/apsb20-42.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-05391 · Security Note
• https://osv.dev/vulnerability/CVE-2020-9681 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9681 · Security Note
• https://cybersecurity-help.cz/vdb/SB2020071419 · Note
• https://t.me/cvenotify/16782 · Telegram Post