Fortinet Discovers Adobe Tech Communications Suite DLL PreLoading Vulnerability
Fortinet's FortiGuard Labs has discovered a DLL preloading vulnerability in Adobe Tech Communications Suite for Windows.
Adobe Technical Communication Suite is a collection of applications for technical communicators, help authors, instructional designers, and eLearning and training design professionals. It includes Adobe Acrobat, Adobe Bridge, Adobe Captivate, Adobe Device Central, Adobe FrameMaker, Adobe Illustrator, Adobe Presenter, Adobe RoboHelp and Adobe 3D Reviewer. The suite allows users to author, manage, and publish interactive instructional information from technical documents and books to online help systems, knowledge bases, interactive training, and eLearning contents.
Adobe Tech Communications Suite for Windows is susceptible to a DLL preloading vulnerability. The issue occurs when the application looks to load a DLL for execution and an attacker provides a malicious DLL to use instead. The application generally follows a specific search path to locate the DLL. The vulnerability can be exploited by a simple file write (or potentially an over-write) which results in a foreign DLL running under the context of the application.
Users should apply the solution provided by Adobe.
Fortinet reported the vulnerability to Adobe on May 21, 2018
Adobe confirmed the vulnerability on September 28, 2018.
Adobe patched the vulnerability on October 9, 2018.