Adobe Security Bulletin
Security updates available for Creative Cloud Desktop Application | APSB19-11
Bulletin ID Date Published Priority
APSB19-11 February 12, 2019 3

Summary

Adobe has released a security update for the Creative Cloud Desktop Application installer for Windows.  This update resolves an insecure library loading vulnerability in the installer that could lead to privilege escalation. 

Affected versions

Product Affected version Platform
Creative Cloud Desktop Application (installer) 

4.7.0.400 and earlier versions

Windows

Solution

Adobe categorizes this update with the following priority rating and recommends users update their installation to the newest version:

Product Updated version Platform Priority rating Availability
Creative Cloud Desktop Application (installer) 4.8.0.410 Windows 
3 Download Center

Vulnerability Details

Vulnerability Category Vulnerability Impact Severity CVE Numbers
Insecure Library Loading (DLL hijacking)  Privilege Escalation Important CVE-2019-7093

Acknowledgments

Adobe would like to thank Tomohisa Hasegawa of Canon Marketing Japan Inc. (CVE-2019-7093) for reporting this issue and for working with Adobe to help protect our customers.