![]() |
Inicial ▼ Bookkeeping
Online ▼ Auditorias ▼
DNS
Administrado ▼
Acerca de DNS
Ordenar/Renovar
Preguntas Frecuentes
AUP
Dynamic DNS Clients
Configurar Dominios Dynamic DNS Update Password Monitoreo
de Redes ▼
Enterprise
Avanzado
Estándarr
Prueba
Preguntas Frecuentes
Resumen de Precio/Funciones
Ordenar
Muestras
Configure/Status Alert Profiles | ||
ID de Prueba: | 1.3.6.1.4.1.25623.1.0.813498 |
Categoría: | Privilege escalation |
Título: | Adobe Illustrator Privilege Escalation Vulnerability-Windows (332644) |
Resumen: | Adobe Illustrator is prone to a privilege escalation vulnerability. |
Descripción: | Summary: Adobe Illustrator is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw exists due to error in application which installs a large number of '.EXE' and '.DLL' files with write-access permission for the Everyone group. Vulnerability Impact: Successful exploitation will allow local users to gain elevated privilege. Affected Software/OS: Adobe Illustrator CS2 on Windows. Solution: Apply patch from vendor. Please see the references for more information. CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P |
Referencia Cruzada: |
Common Vulnerability Exposure (CVE) ID: CVE-2006-0525 BugTraq ID: 16451 http://www.securityfocus.com/bid/16451 Bugtraq: 20060131 Windows Access Control Demystified (Google Search) http://www.securityfocus.com/archive/1/423587/100/0/threaded CERT/CC vulnerability note: VU#953860 http://www.kb.cert.org/vuls/id/953860 http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf http://www.osvdb.org/22908 http://securitytracker.com/id?1015577 http://securitytracker.com/id?1015578 http://securitytracker.com/id?1015579 http://secunia.com/advisories/18698 http://www.vupen.com/english/advisories/2006/0431 XForce ISS Database: adobe-insecure-default-permissions(24464) https://exchange.xforce.ibmcloud.com/vulnerabilities/24464 |
Copyright | Copyright (C) 2018 Greenbone AG |
Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora. |