Fortinet Discovers Adobe Framemaker DLL PreLoading Vulnerability
Summary
Fortinet's FortiGuard Labs has discovered a DLL preloading vulnerability in Adobe Framemaker for Windows.
Adobe Framemaker is a document processor designed for writing and editing large or complex documents, including structured documents.
Adobe Framemaker for Windows is susceptible to a DLL preloading vulnerability. The issue occurs when the application looks to load a DLL for execution and an attacker provides a malicious DLL to use instead. The application generally follows a specific search path to locate the DLL. The vulnerability can be exploited by a simple file write (or potentially an over-write) which results in a foreign DLL running under the context of the application.
Solutions
Users should apply the solution provided by Adobe.
Timeline
Fortinet reported the vulnerability to Adobe on May 21, 2018
Adobe confirmed the vulnerability on September 28, 2018.
Adobe patched the vulnerability on October 9, 2018.