Adobe Reader and Acrobat 6.0.4 and earlier, on Mac OSX, has insecure file and directory permissions, which allows local users to gain privileges by overwriting program files.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Acrobat | Adobe | * | 6.0.4 (including) |
| Acrobat | Adobe | 3.0 (including) | 3.0 (including) |
| Acrobat | Adobe | 3.1 (including) | 3.1 (including) |
| Acrobat | Adobe | 4.0 (including) | 4.0 (including) |
| Acrobat | Adobe | 4.0.5 (including) | 4.0.5 (including) |
| Acrobat | Adobe | 4.0.5a (including) | 4.0.5a (including) |
| Acrobat | Adobe | 4.0.5c (including) | 4.0.5c (including) |
| Acrobat | Adobe | 5.0 (including) | 5.0 (including) |
| Acrobat | Adobe | 5.0.5 (including) | 5.0.5 (including) |
| Acrobat | Adobe | 5.0.10 (including) | 5.0.10 (including) |
| Acrobat | Adobe | 6.0 (including) | 6.0 (including) |
| Acrobat | Adobe | 6.0.1 (including) | 6.0.1 (including) |
| Acrobat | Adobe | 6.0.2 (including) | 6.0.2 (including) |
| Acrobat | Adobe | 6.0.3 (including) | 6.0.3 (including) |
| Acrobat_reader | Adobe | * | 6.0.4 (including) |
| Acrobat_reader | Adobe | 3.0 (including) | 3.0 (including) |
| Acrobat_reader | Adobe | 4.0 (including) | 4.0 (including) |
| Acrobat_reader | Adobe | 4.0.5 (including) | 4.0.5 (including) |
| Acrobat_reader | Adobe | 4.0.5a (including) | 4.0.5a (including) |
| Acrobat_reader | Adobe | 4.0.5c (including) | 4.0.5c (including) |
| Acrobat_reader | Adobe | 5.0 (including) | 5.0 (including) |
| Acrobat_reader | Adobe | 5.0.5 (including) | 5.0.5 (including) |
| Acrobat_reader | Adobe | 5.0.10 (including) | 5.0.10 (including) |
| Acrobat_reader | Adobe | 5.1 (including) | 5.1 (including) |
| Acrobat_reader | Adobe | 6.0 (including) | 6.0 (including) |
| Acrobat_reader | Adobe | 6.0.1 (including) | 6.0.1 (including) |
| Acrobat_reader | Adobe | 6.0.2 (including) | 6.0.2 (including) |
| Acrobat_reader | Adobe | 6.0.3 (including) | 6.0.3 (including) |
References
- http://secunia.com/advisories/21016
- http://securitytracker.com/id?1016473
- http://www.adobe.com/support/security/bulletins/apsb06-08.html
- http://www.osvdb.org/27157
- http://www.securityfocus.com/bid/18945
- http://www.vupen.com/english/advisories/2006/2758
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27678
- http://secunia.com/advisories/21016
- http://securitytracker.com/id?1016473
- http://www.adobe.com/support/security/bulletins/apsb06-08.html
- http://www.osvdb.org/27157
- http://www.securityfocus.com/bid/18945
- http://www.vupen.com/english/advisories/2006/2758
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27678