title: Adobe Creative Cloud installer arbitrary file overwrite vulnerability
description: Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by a file handling vulnerability that could allow an attacker to cause arbitrary file overwriting. Exploitation of this issue requires physical access and user interaction.
problem types: Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)
affected:
{
product: Creative Cloud (desktop component)
vendor: Adobe
versions:
lessThanOrEqual: 5.3, status: affected, version: unspecified, versionType: custom
lessThanOrEqual: None, status: affected, version: unspecified, versionType: custom
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: PHYSICAL
availabilityImpact: HIGH
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
version: 3.0
]