Fortinet Discovers Adobe Framemaker DLL PreLoading Vulnerability
Fortinet's FortiGuard Labs has discovered a DLL preloading vulnerability in Adobe Framemaker for Windows.
Adobe Framemaker is a document processor designed for writing and editing large or complex documents, including structured documents.
Adobe Framemaker for Windows is susceptible to a DLL preloading vulnerability. The issue occurs when the application looks to load a DLL for execution and an attacker provides a malicious DLL to use instead. The application generally follows a specific search path to locate the DLL. The vulnerability can be exploited by a simple file write (or potentially an over-write) which results in a foreign DLL running under the context of the application.
Users should apply the solution provided by Adobe.
Fortinet reported the vulnerability to Adobe on May 21, 2018
Adobe confirmed the vulnerability on September 28, 2018.
Adobe patched the vulnerability on October 9, 2018.