Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large number of .EXE and .DLL files with write-access permission for the Everyone group, which allows local users to gain privileges via Trojan horse programs.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Acrobat | Adobe | 3.0 (including) | 3.0 (including) |
| Acrobat | Adobe | 3.1 (including) | 3.1 (including) |
| Acrobat | Adobe | 4.0 (including) | 4.0 (including) |
| Acrobat | Adobe | 4.0.5 (including) | 4.0.5 (including) |
| Acrobat | Adobe | 4.0.5a (including) | 4.0.5a (including) |
| Acrobat | Adobe | 4.0.5c (including) | 4.0.5c (including) |
| Acrobat | Adobe | 5.0 (including) | 5.0 (including) |
| Acrobat | Adobe | 5.0.5 (including) | 5.0.5 (including) |
| Acrobat | Adobe | 5.0.10 (including) | 5.0.10 (including) |
| Acrobat | Adobe | 6.0 (including) | 6.0 (including) |
| Acrobat | Adobe | 6.0.1 (including) | 6.0.1 (including) |
| Acrobat | Adobe | 6.0.2 (including) | 6.0.2 (including) |
| Acrobat | Adobe | 6.0.3 (including) | 6.0.3 (including) |
| Acrobat | Adobe | 6.0.4 (including) | 6.0.4 (including) |
| Acrobat | Adobe | 7.0 (including) | 7.0 (including) |
| Acrobat | Adobe | 7.0.1 (including) | 7.0.1 (including) |
| Acrobat | Adobe | 7.0.2 (including) | 7.0.2 (including) |
| Acrobat | Adobe | 7.0.3 (including) | 7.0.3 (including) |
| Acrobat_reader | Adobe | 3.0 (including) | 3.0 (including) |
| Acrobat_reader | Adobe | 4.0 (including) | 4.0 (including) |
| Acrobat_reader | Adobe | 4.0.5 (including) | 4.0.5 (including) |
| Acrobat_reader | Adobe | 4.0.5a (including) | 4.0.5a (including) |
| Acrobat_reader | Adobe | 4.0.5c (including) | 4.0.5c (including) |
| Acrobat_reader | Adobe | 4.5 (including) | 4.5 (including) |
| Acrobat_reader | Adobe | 5.0 (including) | 5.0 (including) |
| Acrobat_reader | Adobe | 5.0.5 (including) | 5.0.5 (including) |
| Acrobat_reader | Adobe | 5.0.10 (including) | 5.0.10 (including) |
| Acrobat_reader | Adobe | 5.1 (including) | 5.1 (including) |
| Acrobat_reader | Adobe | 6.0 (including) | 6.0 (including) |
| Acrobat_reader | Adobe | 6.0.1 (including) | 6.0.1 (including) |
| Acrobat_reader | Adobe | 6.0.2 (including) | 6.0.2 (including) |
| Acrobat_reader | Adobe | 6.0.3 (including) | 6.0.3 (including) |
| Acrobat_reader | Adobe | 6.0.4 (including) | 6.0.4 (including) |
| Acrobat_reader | Adobe | 7.0 (including) | 7.0 (including) |
| Acrobat_reader | Adobe | 7.0.1 (including) | 7.0.1 (including) |
| Acrobat_reader | Adobe | 7.0.2 (including) | 7.0.2 (including) |
| Acrobat_reader | Adobe | 7.0.3 (including) | 7.0.3 (including) |
| Creative_suite | Adobe | 1.0 (including) | 1.0 (including) |
| Creative_suite | Adobe | 1.3 (including) | 1.3 (including) |
| Creative_suite | Adobe | 2.0 (including) | 2.0 (including) |
| Illustrator | Adobe | 7.0 (including) | 7.0 (including) |
| Illustrator | Adobe | 8.0 (including) | 8.0 (including) |
| Illustrator | Adobe | 9.0 (including) | 9.0 (including) |
| Illustrator | Adobe | 10.0 (including) | 10.0 (including) |
| Illustrator | Adobe | cs (including) | cs (including) |
| Illustrator | Adobe | cs3 (including) | cs3 (including) |
| Indesign | Adobe | cs (including) | cs (including) |
| Indesign | Adobe | cs3 (including) | cs3 (including) |
| Pagemaker | Adobe | 6.5 (including) | 6.5 (including) |
| Pagemaker | Adobe | 7.0 (including) | 7.0 (including) |
| Photoshop | Adobe | 7.0 (including) | 7.0 (including) |
| Photoshop | Adobe | 8.0 (including) | 8.0 (including) |
| Photoshop | Adobe | 9.0.2 (including) | 9.0.2 (including) |
| Photoshop | Adobe | le (including) | le (including) |
| Premiere | Adobe | 1.5 (including) | 1.5 (including) |
| Version_cue | Adobe | 1.0 (including) | 1.0 (including) |
| Version_cue | Adobe | 1.0.1 (including) | 1.0.1 (including) |
| Version_cue | Adobe | gold (including) | gold (including) |
References
- http://secunia.com/advisories/18698
- http://securitytracker.com/id?1015577
- http://securitytracker.com/id?1015578
- http://securitytracker.com/id?1015579
- http://www.adobe.com/support/techdocs/332644.html
- http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf
- http://www.kb.cert.org/vuls/id/953860
- http://www.osvdb.org/22908
- http://www.securityfocus.com/archive/1/423587/100/0/threaded
- http://www.securityfocus.com/bid/16451
- http://www.vupen.com/english/advisories/2006/0431
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24464
- http://secunia.com/advisories/18698
- http://securitytracker.com/id?1015577
- http://securitytracker.com/id?1015578
- http://securitytracker.com/id?1015579
- http://www.adobe.com/support/techdocs/332644.html
- http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf
- http://www.kb.cert.org/vuls/id/953860
- http://www.osvdb.org/22908
- http://www.securityfocus.com/archive/1/423587/100/0/threaded
- http://www.securityfocus.com/bid/16451
- http://www.vupen.com/english/advisories/2006/0431
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24464