Lightroom Desktop | Untrusted Search Path (CWE-426)

Lightroom Desktop versions 7.1.2 and earlier are affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses a search path to locate critical resources such as programs, then an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

不可信的搜索路径

Adobe Lightroom Desktop 代码问题漏洞

Adobe Lightroom Desktop是美国奥多比（Adobe）公司的一款专业的照片管理和编辑软件，旨在为摄影师和图像编辑人员提供强大的工作流程和编辑工具。 Adobe Lightroom Desktop 7.1.2 版本及之前版本存在代码问题漏洞，该漏洞源于存在不受信任的搜索路径漏洞，可能导致在当前用户的上下文中执行任意代码。

N/A

N/A