Vulnerabilities > CVE-2004-2335 - Local Privilege Escalation vulnerability in Macromedia Contribute and Studio
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
COMPLETE Integrity impact
COMPLETE Availability impact
COMPLETE Summary
The Macromedia installers and e-licensing client on Mac OS X, as used for Macromedia Contribute 2, Director, Dreamweaver, Fireworks, Flash, and Studio, install the AuthenticationService setuid and writable by other users, which allows local users to gain privileges by modifying the program.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |