CVEvulnerability

CVE-2002-1601

5.1 MEDIUM Published 2002-02-09 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2002-02-09
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P

Description

The Connectables feature in Adobe PhotoDeluxe 3.1 prepends the Adobe directory to the CLASSPATH environment variable, which allows applets to run with higher privileges and remote attackers to gain privileges via an HTML e-mail message or a web page.

Affected configurations

• adobe photodeluxe 3.0 • adobe photodeluxe 3.1 • adobe photodeluxe 4.0

References

http://www.kb.cert.org/vuls/id/116875 US Government Resource
http://www.kb.cert.org/vuls/id/AAMN-56LQ2J US Government Resource
http://www.securityfocus.com/bid/4106 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/8210 exchange.xforce.ibmcloud.com
http://www.kb.cert.org/vuls/id/116875 US Government Resource
http://www.kb.cert.org/vuls/id/AAMN-56LQ2J US Government Resource
http://www.securityfocus.com/bid/4106 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/8210 exchange.xforce.ibmcloud.com