CVE

Id
16629  
CVE No.
CVE-2006-0525  
Status
Candidate  
Description
Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large number of .EXE and .DLL files with write-access permission for the Everyone group, which allows local users to gain privileges via Trojan horse programs.  
Phase
Assigned (20060202)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
134235 16629 CVE-2006-0525 BUGTRAQ:20060131 Windows Access Control Demystified  View
134236 16629 CVE-2006-0525 URL:http://www.securityfocus.com/archive/1/archive/1/423587/100/0/threaded  View
134237 16629 CVE-2006-0525 MISC:http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf  View
134238 16629 CVE-2006-0525 CONFIRM:http://www.adobe.com/support/techdocs/332644.html  View
134239 16629 CVE-2006-0525 CERT-VN:VU#953860  View
134240 16629 CVE-2006-0525 URL:http://www.kb.cert.org/vuls/id/953860  View
134241 16629 CVE-2006-0525 BID:16451  View
134242 16629 CVE-2006-0525 URL:http://www.securityfocus.com/bid/16451  View
134243 16629 CVE-2006-0525 VUPEN:ADV-2006-0431  View
134244 16629 CVE-2006-0525 URL:http://www.vupen.com/english/advisories/2006/0431  View
134245 16629 CVE-2006-0525 OSVDB:22908  View
134246 16629 CVE-2006-0525 URL:http://www.osvdb.org/22908  View
134247 16629 CVE-2006-0525 SECTRACK:1015577  View
134248 16629 CVE-2006-0525 URL:http://securitytracker.com/id?1015577  View
134249 16629 CVE-2006-0525 SECTRACK:1015578  View
134250 16629 CVE-2006-0525 URL:http://securitytracker.com/id?1015578  View
134251 16629 CVE-2006-0525 SECTRACK:1015579  View
134252 16629 CVE-2006-0525 URL:http://securitytracker.com/id?1015579  View
134253 16629 CVE-2006-0525 SECUNIA:18698  View
134254 16629 CVE-2006-0525 URL:http://secunia.com/advisories/18698  View
134255 16629 CVE-2006-0525 XF:adobe-insecure-default-permissions(24464)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57890 JVNDB-2006-000086 BIND における DNS キャッシュ汚染の脆弱性 BIND には、他の DNS サーバよりフォワーダとして指定されている場合、実装上の制限のため DNS キャッシュ情報が不正に改ざんされる DNS キャッシュ汚染の脆弱性が存在します。 CVE-2006-0527 16629 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000086.html  View