3 ms·
Adobe patched this to prevent symlinks but apparently didn’t bother to add any sandboxing to their root helper tool. Logically this means that any future bugs i
by nneonneo 6y ago
Adobe patched this to prevent symlinks but apparently didn’t bother to add any sandboxing to their root helper tool. Logically this means that any future bugs in this tool will result in the same level of exploitability.
Nowadays self-updating software, from the user perspective, can be as easy as using Touch ID, so why Adobe and other companies are still messing around with complex, insecure and fragile autoupdate permission bypasses is beyond me.