CVE-2009-3489

Опубликовано: 30 сент. 2009

Источник: nvd

CVSS3: 7.8

CVSS2: 6.9

EPSS Низкий

Описание

Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, which allows local users to (1) stop the service via the stop command, (2) execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or (3) restart the service via the start command.

Ссылки

http://blogs.adobe.com/psirt/2009/09/potential_photoshop_elements_8.html
Broken Link
http://retrogod.altervista.org/9sg_adobe_pe_local.html
Broken Link
Exploit
http://secunia.com/advisories/36895
Broken Link
http://www.securityfocus.com/archive/1/506806/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/36542
Broken Link
Exploit
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1022963
Broken Link
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2009/2798
Permissions Required
http://blogs.adobe.com/psirt/2009/09/potential_photoshop_elements_8.html
Broken Link
http://retrogod.altervista.org/9sg_adobe_pe_local.html
Broken Link
Exploit
http://secunia.com/advisories/36895
Broken Link
http://www.securityfocus.com/archive/1/506806/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/36542
Broken Link
Exploit
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1022963
Broken Link
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2009/2798
Permissions Required

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:adobe:photoshop_elements:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 46%

0.00231

Низкий

7.8 High

CVSS3

6.9 Medium

CVSS2

Дефекты

CWE-732

Связанные уязвимости

GHSA-8vrj-v84v-pmgx