CVE-2016-0947

{"id": "CVE-2016-0947", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2016-01-14T05:59:15.800", "references": [{"url": "http://www.securitytracker.com/id/1034646", "tags": ["Third Party Advisory", "VDB Entry"], "source": "psirt@adobe.com"}, {"url": "https://helpx.adobe.com/security/products/acrobat/apsb16-02.html", "tags": ["Patch", "Vendor Advisory"], "source": "psirt@adobe.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Untrusted search path vulnerability in Adobe Download Manager, as used in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X, allows local users to gain privileges via a crafted resource in an unspecified directory."}, {"lang": "es", "value": "Vulnerabilidad de b\u00fasqueda de ruta no confiable en Adobe Download Manager, como se utiliza en Adobe Reader y Acrobat en versiones anteriores a 11.0.14, Acrobat y Acrobat Reader DC Classic en versiones anteriores a 15.006.30119 y Acrobat y Acrobat Reader DC Continuous en versiones anteriores a 15.010.20056 en Windows y OS X, permite a usuarios locales obtener privilegios a trav\u00e9s de un recurso manipulado en un directorio no especificado."}], "lastModified": "2016-12-07T23:42:22.320", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DDDDFD6D-1CEF-42E6-9FB4-BFA3DE675CA3", "versionEndIncluding": "11.0.13"}, {"criteria": "cpe:2.3:a:adobe:acrobat:11.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2643209D-1A36-4E2F-836A-0521F6932A99"}, {"criteria": "cpe:2.3:a:adobe:acrobat:11.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "51C67ABD-5800-46DD-9E81-2A586698BC90"}, {"criteria": "cpe:2.3:a:adobe:acrobat:11.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F9FF4675-A9FF-4B0F-BBC6-D29B6324D27D"}, {"criteria": "cpe:2.3:a:adobe:acrobat:11.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "76CE9DE1-FFB6-483B-A76C-38819C1407B9"}, {"criteria": "cpe:2.3:a:adobe:acrobat:11.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA71918B-F2B2-442B-AA12-3E16759B0674"}, {"criteria": "cpe:2.3:a:adobe:acrobat:11.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "15ACC0AD-EFB5-4C96-888A-3E8A1C35E64B"}, {"criteria": "cpe:2.3:a:adobe:acrobat:11.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3BBFA7D7-1A9E-4751-A14A-62C2DB2672A9"}, {"criteria": "cpe:2.3:a:adobe:acrobat:11.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "106D9571-59BF-4056-B7CD-F70FC3F1B73B"}, {"criteria": "cpe:2.3:a:adobe:acrobat:11.0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8FD7CF1E-CF36-4291-B17F-67A070CBE2EE"}, {"criteria": "cpe:2.3:a:adobe:acrobat:11.0.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "71DB447D-5C36-458E-BD07-4FC3CB26FDCE"}, {"criteria": "cpe:2.3:a:adobe:acrobat:11.0.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "80D16772-02BF-4046-9C47-A25D07DB7F70"}, {"criteria": "cpe:2.3:a:adobe:acrobat:11.0.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FAF0D04A-B95D-4B50-ACE8-DA3AA6ED7C54"}, {"criteria": "cpe:2.3:a:adobe:acrobat:11.0.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "812B6806-B488-4D8C-B942-9F3174ECD85D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"}, {"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*", "vulnerable": true, "matchCriteriaId": "C58D9C69-59AC-4C31-8813-DF07C322568E", "versionEndIncluding": "15.006.30097"}, {"criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*", "vulnerable": true, "matchCriteriaId": "000C0EBD-E41C-471E-B71A-5CD418594EF5", "versionEndIncluding": "15.009.20077"}, {"criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*", "vulnerable": true, "matchCriteriaId": "91134715-4C87-4F5A-9B5A-11A6B66ED00A", "versionEndIncluding": "15.006.30097"}, {"criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*", "vulnerable": true, "matchCriteriaId": "C4B9A613-9E00-4D4E-8780-471E913CA60D", "versionEndIncluding": "15.009.20077"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"}, {"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AAB3A419-D57B-4E1E-83D3-34A2B73448A6", "versionEndIncluding": "11.0.13"}, {"criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "829ED66F-149C-4EC5-B9F1-5DD678AF40DC"}, {"criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E72C3C61-511E-4977-B029-70277C68E24D"}, {"criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47478166-EE66-4837-A6C0-0A519F9EDD26"}, {"criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C4E8E909-3277-429B-9CB2-973A606BB4A8"}, {"criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1F0F0C4-0008-452E-99F5-6264465C3FFC"}, {"criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E554FA7F-4F54-4BDD-80EB-0566805D995B"}, {"criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A48CD244-BCF6-4D0F-B07D-44304493BCFD"}, {"criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "86A84BB0-85D3-47E8-BC90-291E8C2CCEEC"}, {"criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37283AD4-4B3F-48AB-A3DD-C33871CCB5DA"}, {"criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "85C3571E-43F0-41D3-840F-A811B88FFFC1"}, {"criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1D97472-841C-471C-8668-AF96A41A1B7F"}, {"criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83BEA317-8DD4-4C4D-ADD1-17EA314F31DD"}, {"criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "78D35D0E-E63A-4495-8318-45177838A40C"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"}, {"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}], "operator": "OR"}], "operator": "AND"}], "evaluatorComment": "<a href=\"http://cwe.mitre.org/data/definitions/426.html\">CWE-426: Untrusted Search Path</a>", "sourceIdentifier": "psirt@adobe.com"}