CVE-2005-4708 Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service with the Users group permitted to configure the service, includ...
HighCVSS 7.2
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service with the Users group permitted to configure the service, including the path to executable, which allows local users to execute arbitrary code as Local System.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe captivate | All versions | No fix listed |
| Adobe contribute | = 2 | No fix listed |
| Adobe contribute | = 3 | No fix listed |
| Adobe director | All versions | No fix listed |
| Adobe dreamweaver | = 9.0 | No fix listed |
| Adobe elicensing | All versions | No fix listed |
| Adobe fireworks | = 9.0 | No fix listed |
| Adobe flash player | All versions | No fix listed |
| Adobe freehand | = mx | No fix listed |
| Adobe studio | = mx | No fix listed |
References
- 15654 third-party-advisory
- 1014158 vdb-entry
- 1014159 vdb-entry
- 1014160 vdb-entry
- 1014161 vdb-entry
- 1014162 vdb-entry
- 1014163 vdb-entry
- 1014164 vdb-entry
- 1014165 vdb-entry
- 1014166 vdb-entry
- www.cs.princeton.edu
- VU#953860 third-party-advisory us-government-resource
- www.macromedia.com patch vendor-advisory
- 17248 vdb-entry
- 20060131 Windows Access Control Demystified mailing-list
- 13925 vdb-entry
- ADV-2005-0723 vdb-entry