CVE-2016-6935 Adobe Creative Cloud Desktop Application Unquoted Search Path Vulnerability (APSB16-34)

Adobe Creative Cloud Desktop Application is your central location for managing the dozens of apps and services that are included in your Creative Cloud membership. You can also sync and share files, manage thousands of fonts, access libraries of stock photography and design assets.

Adobe Creative Cloud Desktop Application is prone to Unquoted Search Path vulnerability.

Affected Versions:
Adobe Creative Cloud Desktop Application 3.7.0.272 and earlier versions

Successful exploitation could allow authenticated, unprivileged local attacker to execute arbitrary code under elevated security context of the application.

The vendor has released an update to fix the vulnerability. Please refer to Adobe advisory APSB16-34 for more details.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

APSB16-34