CVE-2006-0525
4.6
CVSS SCORE
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large number of .EXE and .DLL files with write-access permission for the Everyone group, which allows local users to gain privileges via Trojan horse programs.
CVSS Vector Details
Attack Vector
Local
Attack Complexity
Low
Confidentiality
P
Integrity
P
Availability
P
Affected Software Configurations
- a adobe acrobat 3.0 * * * * * * *
- a adobe acrobat 3.1 * * * * * * *
- a adobe acrobat 4.0 * * * * * * *
- a adobe acrobat 4.0.5 * * * * * * *
- a adobe acrobat 4.0.5a * * * * * * *
- a adobe acrobat 4.0.5c * * * * * * *
- a adobe acrobat 5.0 * * * * * * *
- a adobe acrobat 5.0.5 * * * * * * *
- a adobe acrobat 5.0.10 * * * * * * *
- a adobe acrobat 6.0 * * * * * * *
Weaknesses (CWE)
- CWE-264
References & External Links
- http://secunia.com/advisories/18698
- http://securitytracker.com/id?1015577
- http://securitytracker.com/id?1015578
- http://securitytracker.com/id?1015579
- http://www.adobe.com/support/techdocs/332644.html
- http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf
- http://www.kb.cert.org/vuls/id/953860
- http://www.osvdb.org/22908
- http://www.securityfocus.com/archive/1/423587/100/0/threaded
- http://www.securityfocus.com/bid/16451
- http://www.vupen.com/english/advisories/2006/0431
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24464
- http://secunia.com/advisories/18698
- http://securitytracker.com/id?1015577
- http://securitytracker.com/id?1015578
- http://securitytracker.com/id?1015579
- http://www.adobe.com/support/techdocs/332644.html
- http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf
- http://www.kb.cert.org/vuls/id/953860
- http://www.osvdb.org/22908
- http://www.securityfocus.com/archive/1/423587/100/0/threaded
- http://www.securityfocus.com/bid/16451
- http://www.vupen.com/english/advisories/2006/0431
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24464