CVE-2021-43017CWE-379

Adobe Creative Cloud DLL Hijacking Local Application Denial of Service

Medium · published November 18, 2021

CVSS v3.1
4.2
EPSS
1%
Percentile
67.2
In the wild
Unconfirmed
What it is

Adobe Creative Cloud version 5.5 (and earlier) are affected by an Application denial of service vulnerability in the Creative Cloud Desktop installer. An authenticated attacker with root privileges could leverage this vulnerability to achieve denial of service by planting a malicious file on the victim's local machine. User interaction is required before product installation to abuse this vulnerability.

The record
Technical detail
CVSS v3.1
4.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01172 · 67.2th percentile
Weakness
CWE-379 · Creation of Temporary File in Directory with Insecure Permissions
Published
2021-11-18T18:35Z
EPSS history
Timeline
  • 18 NOV 18:35Z
    Adobe Creative Cloud DLL Hijacking Local Application Denial of Service
    cvelistv5