Adobe Security Bulletin

Security Updates Available for Adobe Genuine Service | APSB21-27

Bulletin ID

Date Published

Priority

APSB21-27

May 11, 2020

3

Summary

Adobe has released updates for the Adobe Genuine Service for Windows and macOS. This update resolves an important vulnerability that could lead to privilege escalation in the context of the current user.    

Affected Versions

Product

Version

Platform

Adobe Genuine Service

Version 7.1  and earlier versions   

Windows and macOS

Poznámka:

To verify the version of Adobe Genuine Service installed on your system, please follow the following steps:   

For Windows machines:

  • Navigate to C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient 
  • Right click on AdobeGCClient.exe, select “Properties”. 
  • Go to “Details” tab, the File Version can be seen within. 

For mac machines:

  • Navigate to /Library/Application Support/Adobe/AdobeGCClient/
  • Right click on AdobeGCClient, select Get Info. 
  • File Version can be seen corresponding version tag

Solution

Adobe categorizes these updates with the following priority ratings.

Product

Version

Platform

Priority Rating

Adobe Genuine Service      

7.3

Windows and macOS

3

Poznámka:

Adobe Genuine Integrity Service has a self-update mechanism that runs automatically at a regular interval when the host is connected to the internet.  For more details regarding Adobe Genuine Integrity Service, please visit here.

Vulnerability details

Vulnerability Category

Vulnerability Impact

Severity

CVE Numbers

Insecure File Permission

Privilege Escalation

Important

CVE-2021-28547

Acknowledgments

Adobe would like to thank Qingyang Chen for reporting these issues and for working with Adobe to help protect our customers.  

 

Logo Adobe

Prihláste sa do svojho účtu