CVE-2006-0525

Summary

Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large number of .EXE and .DLL files with write-access permission for the Everyone group, which allows local users to gain privileges via Trojan horse programs.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.adobe.com/support/techdocs/332644.html
• http://www.securityfocus.com/bid/16451
• http://securitytracker.com/id?1015577
• http://securitytracker.com/id?1015579
• http://www.securityfocus.com/archive/1/423587/100/0/threaded
• http://www.kb.cert.org/vuls/id/953860
• http://secunia.com/advisories/18698
• http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf
• http://securitytracker.com/id?1015578
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24464
• http://www.vupen.com/english/advisories/2006/0431
• http://www.osvdb.org/22908

References

• http://www.adobe.com/support/techdocs/332644.html
• http://www.securityfocus.com/bid/16451
• http://securitytracker.com/id?1015577
• http://securitytracker.com/id?1015579
• http://www.securityfocus.com/archive/1/423587/100/0/threaded
• http://www.kb.cert.org/vuls/id/953860
• http://secunia.com/advisories/18698
• http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf
• http://securitytracker.com/id?1015578
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24464
• http://www.vupen.com/english/advisories/2006/0431
• http://www.osvdb.org/22908

• ←Previous
• Next→