PT-2019-6015
CVE-2019-7960
·
Published
2019-11-12
·
Updated
2021-09-08
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Adobe Animate CC versions 19.2.1 and earlier
Description
The issue is related to insecure library loading, also known as dll hijacking, which could lead to privilege escalation if successfully exploited. This vulnerability is associated with the use of an insecure path when loading dynamic link libraries (DLLs), allowing an attacker to potentially elevate their privileges.
Recommendations
For Adobe Animate CC versions 19.2.1 and earlier, update to a version later than 19.2.1 to resolve the issue.
At the moment, there is no information about other specific mitigation measures for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾