Vulnerability in Adobe Acrobat
CVE-2006-0525
Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large number of .EXE and .DLL files with write-access permission for the Everyone group, which allows local users to gain privileges via Trojan horse programs.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 4.6 (Medium). Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.013 (69.8th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 70th percentile — 69.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.013 · newest: 0.013 · change: 0.000
Affected products
- Adobe Acrobat — versions 3.0, 3.1, 4.0
- Adobe Acrobat Reader — versions 3.0, 4.0, 4.0.5
- Adobe Creative Suite — versions 1.0, 1.3, 2.0
- Adobe Illustrator — versions 7.0, 8.0, 9.0
- Adobe Indesign — versions cs, cs3
- Adobe Pagemaker — versions 6.5, 7.0
- Adobe Photoshop — versions 7.0, 8.0, 9.0.2
- Adobe Premiere — versions 1.5
- Adobe Version Cue — versions 1.0, 1.0.1, gold
Weakness classification (CWE)
References
- www.adobe.com/support/techdocs/332644.html
- www.securityfocus.com/bid/16451 (vdb-entry)
- securitytracker.com/id (vdb-entry)
- securitytracker.com/id (vdb-entry)
- www.securityfocus.com/archive/1/423587/100/0/threaded (mailing-list)
- www.kb.cert.org/vuls/id/953860 (US Government Resource, Third Party Advisory, third-party-advisory)
- secunia.com/advisories/18698 (Vendor Advisory, third-party-advisory)
- www.cs.princeton.edu/~sudhakar/papers/winval.pdf
- securitytracker.com/id (vdb-entry)
- exchange.xforce.ibmcloud.com/vulnerabilities/24464 (vdb-entry)