Unquoted Search Path Vulnerability in Adobe Photoshop Products

CVE-2017-3005

Summary

Adobe Photoshop has a vulnerability that arises from an unquoted search path issue, which could potentially enable an attacker to execute arbitrary code. This flaw primarily affects versions CC 2017 (18.0.1) and earlier as well as CC 2015.5.1 (17.0.1) and earlier. Attackers could exploit the vulnerability by placing a malicious executable in a directory that is included in the search path, leading to execution of unauthorized code. Users of affected products should review their security configurations and apply mitigations as outlined in Adobe's security advisory.

References