CVE-2006-0525

Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large number of .EXE and .DLL files with write-access permission for the Everyone group, which allows local users to gain privileges via Trojan horse programs.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:adobe:acrobat:3.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:3.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:4.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:4.0.5:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:4.0.5a:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:4.0.5c:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:5.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:5.0.5:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:5.0.10:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:6.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:6.0.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:6.0.2:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:6.0.3:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:6.0.4:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader:3.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader:4.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader:4.0.5:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader:4.0.5a:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader:4.0.5c:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader:4.5:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader:5.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader:5.0.5:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader:5.0.10:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader:5.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader:6.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader:6.0.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader:6.0.2:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader:6.0.3:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader:6.0.4:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*
cpe:2.3:a:adobe:creative_suite:1.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:creative_suite:1.3:*:*:*:*:*:*:*
cpe:2.3:a:adobe:creative_suite:2.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:illustrator:7.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:illustrator:8.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:illustrator:9.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:illustrator:10.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:illustrator:cs:*:*:*:*:*:*:*
cpe:2.3:a:adobe:illustrator:cs3:*:*:*:*:*:*:*
cpe:2.3:a:adobe:indesign:cs:*:*:*:*:*:*:*
cpe:2.3:a:adobe:indesign:cs3:*:*:*:*:*:*:*
cpe:2.3:a:adobe:pagemaker:6.5:*:*:*:*:*:*:*
cpe:2.3:a:adobe:pagemaker:6.5:*:plus:*:*:*:*:*
cpe:2.3:a:adobe:pagemaker:7.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:pagemaker:7.0:*:plus:*:*:*:*:*
cpe:2.3:a:adobe:photoshop:7.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:photoshop:8.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:photoshop:9.0.2:*:*:*:*:*:*:*
cpe:2.3:a:adobe:photoshop:le:*:*:*:*:*:*:*
cpe:2.3:a:adobe:premiere:1.5:*:pro:*:*:*:*:*
cpe:2.3:a:adobe:version_cue:1.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:version_cue:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:version_cue:gold:*:mac_os_x:*:*:*:*:*

History

21 Nov 2024, 00:06

Type Values Removed Values Added
References () http://secunia.com/advisories/18698 - Vendor Advisory () http://secunia.com/advisories/18698 - Vendor Advisory
References () http://securitytracker.com/id?1015577 - () http://securitytracker.com/id?1015577 -
References () http://securitytracker.com/id?1015578 - () http://securitytracker.com/id?1015578 -
References () http://securitytracker.com/id?1015579 - () http://securitytracker.com/id?1015579 -
References () http://www.adobe.com/support/techdocs/332644.html - () http://www.adobe.com/support/techdocs/332644.html -
References () http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf - () http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf -
References () http://www.kb.cert.org/vuls/id/953860 - Third Party Advisory, US Government Resource () http://www.kb.cert.org/vuls/id/953860 - Third Party Advisory, US Government Resource
References () http://www.osvdb.org/22908 - () http://www.osvdb.org/22908 -
References () http://www.securityfocus.com/archive/1/423587/100/0/threaded - () http://www.securityfocus.com/archive/1/423587/100/0/threaded -
References () http://www.securityfocus.com/bid/16451 - () http://www.securityfocus.com/bid/16451 -
References () http://www.vupen.com/english/advisories/2006/0431 - Vendor Advisory () http://www.vupen.com/english/advisories/2006/0431 - Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/24464 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/24464 -

Information

Published : 2006-02-02 11:02

Updated : 2024-11-21 00:06


NVD link : CVE-2006-0525

Mitre link : CVE-2006-0525

CVE.ORG link : CVE-2006-0525


JSON object : View

Products Affected

adobe

  • acrobat_reader
  • illustrator
  • acrobat
  • pagemaker
  • creative_suite
  • premiere
  • indesign
  • photoshop
  • version_cue
CWE
CWE-264

Permissions, Privileges, and Access Controls