high7.2
CVE-2005-4708
Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service with the Users group p…
Impact
Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service with the Users group permitted to configure the service, including the path to executable, which allows local users to execute arbitrary code as Local System.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Captivate | All versions |
| Adobe | Contribute | Versions 2, 3 |
| Adobe | Director | All versions |
| Adobe | Dreamweaver | Version 9.0 |
| Adobe | Elicensing | All versions |
| Adobe | Fireworks | Version 9.0 |
| Adobe | Flash Player | All versions |
| Adobe | Freehand | Version mx |
| Adobe | Studio | Version mx |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/15654
- http://securitytracker.com/id?1014158
- http://securitytracker.com/id?1014159
- http://securitytracker.com/id?1014160
- http://securitytracker.com/id?1014161
- http://securitytracker.com/id?1014162
- http://securitytracker.com/id?1014163
- http://securitytracker.com/id?1014164
- http://securitytracker.com/id?1014165
- http://securitytracker.com/id?1014166
- http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf
- http://www.kb.cert.org/vuls/id/953860
- http://www.macromedia.com/devnet/security/security_zone/mpsb05-04.html
- http://www.osvdb.org/17248
- http://www.securityfocus.com/archive/1/423587/100/0/threaded
- http://www.securityfocus.com/bid/13925
- http://www.vupen.com/english/advisories/2005/0723
- http://secunia.com/advisories/15654
- http://securitytracker.com/id?1014158
- http://securitytracker.com/id?1014159
- http://securitytracker.com/id?1014160
- http://securitytracker.com/id?1014161
- http://securitytracker.com/id?1014162
- http://securitytracker.com/id?1014163
- http://securitytracker.com/id?1014164