ID CVE-2017-3005
Summary Adobe Photoshop versions CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier have an unquoted search path vulnerability.
References
Vulnerable Configurations
  • cpe:2.3:a:adobe:photoshop_cc:17.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop_cc:17.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop_cc:17.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop_cc:17.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop_cc:18.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop_cc:18.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop_cc:18.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop_cc:18.0.1:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
CVSS
Base: 7.2 (as of 10-05-2019 - 13:55)
Impact:
Exploitability:
CWE CWE-428
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:L/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid 97553
confirm https://helpx.adobe.com/security/products/photoshop/apsb17-12.html
sectrack 1038229
Last major update 10-05-2019 - 13:55
Published 12-04-2017 - 14:59
Last modified 10-05-2019 - 13:55
Back to Top