Description
Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large number of .EXE and .DLL files with write-access permission for the Everyone group, which allows local users to gain privileges via Trojan horse programs.
References
- http://www.adobe.com/support/techdocs/332644.html
- 16451 vdb-entry
- 1015577 vdb-entry
- 1015579 vdb-entry
- 20060131 Windows Access Control Demystified mailing-list
- VU#953860 third-party-advisory
- 18698 third-party-advisory
- http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf
- 1015578 vdb-entry
- adobe-insecure-default-permissions(24464) vdb-entry
- ADV-2006-0431 vdb-entry
- 22908 vdb-entry