CVEvulnerability
CVE-2006-0525
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-02-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large number of .EXE and .DLL files with write-access permission for the Everyone group, which allows local users to gain privileges via Trojan horse programs.
Affected configurations
• adobe acrobat 3.0
• adobe acrobat 3.1
• adobe acrobat 4.0
• adobe acrobat 4.0.5
• adobe acrobat 4.0.5a
• adobe acrobat 4.0.5c
• adobe acrobat 5.0
• adobe acrobat 5.0.5
• adobe acrobat 5.0.10
• adobe acrobat 6.0
• adobe acrobat 6.0.1
• adobe acrobat 6.0.2
• adobe acrobat 6.0.3
• adobe acrobat 6.0.4
• adobe acrobat 7.0
• adobe acrobat 7.0.1
• adobe acrobat 7.0.2
• adobe acrobat 7.0.3
• adobe acrobat reader 3.0
• adobe acrobat reader 4.0
• adobe acrobat reader 4.0.5
• adobe acrobat reader 4.0.5a
• adobe acrobat reader 4.0.5c
• adobe acrobat reader 4.5
• adobe acrobat reader 5.0
• adobe acrobat reader 5.0.5
• adobe acrobat reader 5.0.10
• adobe acrobat reader 5.1
• adobe acrobat reader 6.0
• adobe acrobat reader 6.0.1
• adobe acrobat reader 6.0.2
• adobe acrobat reader 6.0.3
• adobe acrobat reader 6.0.4
• adobe acrobat reader 7.0
• adobe acrobat reader 7.0.1
• adobe acrobat reader 7.0.2
• adobe acrobat reader 7.0.3
• adobe creative suite 1.0
• adobe creative suite 1.3
• adobe creative suite 2.0
• adobe illustrator 7.0
• adobe illustrator 8.0
• adobe illustrator 9.0
• adobe illustrator 10.0
• adobe illustrator cs
• adobe illustrator cs3
• adobe indesign cs
• adobe indesign cs3
• adobe pagemaker 6.5
• adobe pagemaker 7.0
• adobe photoshop 7.0
• adobe photoshop 8.0
• adobe photoshop 9.0.2
• adobe photoshop le
• adobe premiere 1.5
• adobe version cue 1.0
• adobe version cue 1.0.1
• adobe version cue gold
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/18698 Vendor Advisory
- http://securitytracker.com/id?1015577 securitytracker.com
- http://securitytracker.com/id?1015578 securitytracker.com
- http://securitytracker.com/id?1015579 securitytracker.com
- http://www.adobe.com/support/techdocs/332644.html www.adobe.com
- http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf www.cs.princeton.edu
- http://www.kb.cert.org/vuls/id/953860 Third Party Advisory, US Government Resource
- http://www.osvdb.org/22908 www.osvdb.org
- http://www.securityfocus.com/archive/1/423587/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16451 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0431 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24464 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/18698 Vendor Advisory
- http://securitytracker.com/id?1015577 securitytracker.com
- http://securitytracker.com/id?1015578 securitytracker.com
- http://securitytracker.com/id?1015579 securitytracker.com
- http://www.adobe.com/support/techdocs/332644.html www.adobe.com
- http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf www.cs.princeton.edu
- http://www.kb.cert.org/vuls/id/953860 Third Party Advisory, US Government Resource
- http://www.osvdb.org/22908 www.osvdb.org
- http://www.securityfocus.com/archive/1/423587/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16451 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0431 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24464 exchange.xforce.ibmcloud.com