medium4.6
CVE-2006-0525
Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large number of .EXE and .DLL files with write-…
Impact
Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large number of .EXE and .DLL files with write-access permission for the Everyone group, which allows local users to gain privileges via Trojan horse programs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Acrobat | Versions 3.0, 3.1, 4.0, 4.0.5, 4.0.5a, 4.0.5c |
| Adobe | Acrobat Reader | Versions 3.0, 4.0, 4.0.5, 4.0.5a, 4.0.5c, 4.5 |
| Adobe | Creative Suite | Versions 1.0, 1.3, 2.0 |
| Adobe | Illustrator | Versions 7.0, 8.0, 9.0, 10.0, cs, cs3 |
| Adobe | Indesign | Versions cs, cs3 |
| Adobe | Pagemaker | Versions 6.5, 7.0 |
| Adobe | Photoshop | Versions 7.0, 8.0, 9.0.2, le |
| Adobe | Premiere | Version 1.5 |
| Adobe | Version Cue | Versions 1.0, 1.0.1, gold |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/18698
- http://securitytracker.com/id?1015577
- http://securitytracker.com/id?1015578
- http://securitytracker.com/id?1015579
- http://www.adobe.com/support/techdocs/332644.html
- http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf
- http://www.kb.cert.org/vuls/id/953860
- http://www.osvdb.org/22908
- http://www.securityfocus.com/archive/1/423587/100/0/threaded
- http://www.securityfocus.com/bid/16451
- http://www.vupen.com/english/advisories/2006/0431
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24464
- http://secunia.com/advisories/18698
- http://securitytracker.com/id?1015577
- http://securitytracker.com/id?1015578
- http://securitytracker.com/id?1015579
- http://www.adobe.com/support/techdocs/332644.html
- http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf
- http://www.kb.cert.org/vuls/id/953860
- http://www.osvdb.org/22908
- http://www.securityfocus.com/archive/1/423587/100/0/threaded
- http://www.securityfocus.com/bid/16451
- http://www.vupen.com/english/advisories/2006/0431
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24464