fkie_cve-2006-0525
Vulnerability from fkie_nvd
Published
2006-02-02 11:02
Modified
2024-11-21 00:06
Severity ?
Summary
Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large number of .EXE and .DLL files with write-access permission for the Everyone group, which allows local users to gain privileges via Trojan horse programs.
References
cve@mitre.orghttp://secunia.com/advisories/18698Vendor Advisory
cve@mitre.orghttp://securitytracker.com/id?1015577
cve@mitre.orghttp://securitytracker.com/id?1015578
cve@mitre.orghttp://securitytracker.com/id?1015579
cve@mitre.orghttp://www.adobe.com/support/techdocs/332644.html
cve@mitre.orghttp://www.cs.princeton.edu/~sudhakar/papers/winval.pdf
cve@mitre.orghttp://www.kb.cert.org/vuls/id/953860Third Party Advisory, US Government Resource
cve@mitre.orghttp://www.osvdb.org/22908
cve@mitre.orghttp://www.securityfocus.com/archive/1/423587/100/0/threaded
cve@mitre.orghttp://www.securityfocus.com/bid/16451
cve@mitre.orghttp://www.vupen.com/english/advisories/2006/0431Vendor Advisory
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/24464
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/18698Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1015577
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1015578
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1015579
af854a3a-2127-422b-91ae-364da2661108http://www.adobe.com/support/techdocs/332644.html
af854a3a-2127-422b-91ae-364da2661108http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf
af854a3a-2127-422b-91ae-364da2661108http://www.kb.cert.org/vuls/id/953860Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/22908
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/423587/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/16451
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/0431Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/24464



{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "465F9134-DD86-4F13-8C39-949BE6E7389A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB041EDF-EFF8-4AA6-8D59-411975547534",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "4C05F6A5-0FB3-489B-9B8B-64C569C03D7A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:4.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "AABA4FE3-662B-4956-904D-45086E000890",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:4.0.5a:*:*:*:*:*:*:*",
              "matchCriteriaId": "998CD79C-458E-46A8-8261-1C40C53D9FA5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:4.0.5c:*:*:*:*:*:*:*",
              "matchCriteriaId": "0155FB0B-7FAD-4388-96C8-A8543B4FDFD9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "201F059D-33D1-4D9F-9C6F-FC8EB49E4735",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:5.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "B025E795-5713-485E-8A15-EBE4451A1A46",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:5.0.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "FDEA946E-B6D2-463B-89D0-F2F37278089E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "183B5940-2310-4D2E-99F0-9792A801A442",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:6.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "4F8BB13E-2732-4F9E-A588-EA1C00893C8B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:6.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5FCDCBF-597B-439C-8D8B-2819FC70C567",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:6.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "440B890A-90E9-4456-B92A-856CD17F0C78",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:6.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "79BD9D8D-39DA-403E-915D-E1B6A46A6BAB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "FECFC942-4F04-420C-A9B4-AE0C0590317F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "1DC97A87-2652-4AD6-8E10-419A9AC9C245",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "B1C92642-7C8D-411A-8726-06A8A6483D65",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "F509566A-6D4A-40C0-8A16-F8765C5DCAAF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:4.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "707D7124-6063-4510-80B4-AD9675996F67",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:4.0.5a:*:*:*:*:*:*:*",
              "matchCriteriaId": "200FFAE3-CC1C-4A11-99AD-377D54A67195",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:4.0.5c:*:*:*:*:*:*:*",
              "matchCriteriaId": "8A990E86-07C0-49E2-92D6-55E499F30FAE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:4.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "6AED985D-60D7-489E-9F1E-CE3C9D985B7A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "5F0FCA2F-FD7F-4CE5-9D45-324A7EC45105",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:5.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "EF7EAA22-CED2-4379-9465-9562BACB1C20",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:5.0.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "F2402B40-6B72-48B5-A376-DA8D16CA43FA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "ACF742B8-5F7A-487B-835C-756B1BB392F4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C0BB7C0C-B1D6-4733-BA91-022A1A7FB2E2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:6.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "0B131DB8-4B6A-4AF2-8D5E-B5EA1AEBFB3B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:6.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "5B9351C2-16ED-4766-B417-8DB3A8766C2F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:6.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "74667860-0047-40AD-9468-860591BA9D17",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:6.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "5DEA092A-5532-4DCC-B43D-7A8ECF07FA4C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "24262AFA-2EC8-479E-8922-36DB4243E404",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1E62096-08B2-4722-A492-11E9A441E85B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "C5370AC6-90EE-48EA-8DBD-54002B102F7C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:creative_suite:1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "CC9C6894-B756-4189-AE82-B234449925DD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:creative_suite:1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "ADA16570-F6F8-4FA7-B88B-C3890F040C0C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:creative_suite:2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C51CA73D-6CD2-4597-A0EF-39C748EBA508",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:illustrator:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "541B9668-6BEB-49BB-9C75-44D2595B2E28",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:illustrator:8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "88C95931-0247-4605-B2C5-35EB7D654B4C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:illustrator:9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C1AA37B5-DE58-4856-9EE8-8FFAF6CC9E1F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:illustrator:10.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "2BF8CE1A-B768-4A77-9A46-8F0158E44D91",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:illustrator:cs:*:*:*:*:*:*:*",
              "matchCriteriaId": "B1FFC4D8-B7D1-4D74-8C00-1AC11A7373DF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:illustrator:cs3:*:*:*:*:*:*:*",
              "matchCriteriaId": "F2544447-313B-42DD-831B-E1AED3B6086F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:indesign:cs:*:*:*:*:*:*:*",
              "matchCriteriaId": "FFF91AF9-BFDB-4618-90FE-875FF8FFA3DA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:indesign:cs3:*:*:*:*:*:*:*",
              "matchCriteriaId": "31870168-D8E9-4439-9C9D-994F35FEFB8C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:pagemaker:6.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "0DBC38A3-0BE2-4862-B5F1-0340FB21BCC6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:pagemaker:6.5:*:plus:*:*:*:*:*",
              "matchCriteriaId": "7E584707-1A7C-492C-96A5-CDB8D77DCC95",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:pagemaker:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "A4748647-13D5-48DF-9DBE-75EBFF8BC647",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:pagemaker:7.0:*:plus:*:*:*:*:*",
              "matchCriteriaId": "5594EAAC-5AC9-4CF4-B664-AB654B99D548",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:photoshop:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "DD03FB10-858D-4B2B-B86A-46AEBF7DA63E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:photoshop:8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "A0820E48-12AD-4112-BC83-D81045D64AA4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:photoshop:9.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F1D2452-C141-4A9E-ACA9-61A44FB63302",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:photoshop:le:*:*:*:*:*:*:*",
              "matchCriteriaId": "4C0A4519-88EA-448D-840E-8679977BA7F4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:premiere:1.5:*:pro:*:*:*:*:*",
              "matchCriteriaId": "0A0C3110-C713-497B-AC49-4CCE35E7FD49",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:version_cue:1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "ABD4E1CD-8226-4308-8B6F-65B7AFB1CE32",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:version_cue:1.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "7ABC546A-EE59-47E3-A0F0-9210050121D6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:version_cue:gold:*:mac_os_x:*:*:*:*:*",
              "matchCriteriaId": "A10F07F5-5C99-40D5-9C15-C1DDA8D98B7C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large number of .EXE and .DLL files with write-access permission for the Everyone group, which allows local users to gain privileges via Trojan horse programs."
    }
  ],
  "id": "CVE-2006-0525",
  "lastModified": "2024-11-21T00:06:39.823",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.6,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": true,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-02-02T11:02:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/18698"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1015577"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1015578"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1015579"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.adobe.com/support/techdocs/332644.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/953860"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/22908"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/423587/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/16451"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2006/0431"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24464"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/18698"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1015577"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1015578"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1015579"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.adobe.com/support/techdocs/332644.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/953860"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/22908"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/423587/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/16451"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2006/0431"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24464"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.