Description
Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, which allows local users to (1) stop the service via the stop command, (2) execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or (3) restart the service via the start command.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 2
- Adobe Photoshop Elements - Active File Monitor Service Privilege Escalation EDB-9988 · local · Oct 29, 2009 · verified
- Adobe Photoshop Elements 8.0 - Active File Monitor Privilege Escalation EDB-9807 · local · Sep 29, 2009 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 36542 vdb-entry
- ADV-2009-2798 vdb-entry
- 20090929 Adobe Photoshop Elements 8.0 Active File Monitor Service Bad Security Descriptor Local Elevation Of Privileges mailing-list
- http://blogs.adobe.com/psirt/2009/09/potential_photoshop_elements_8.html
- 1022963 vdb-entry
- http://retrogod.altervista.org/9sg_adobe_pe_local.html
- 36895 third-party-advisory