Adobe Reader

CVSS 4.6 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

local

low complexity

adobe

NVD

Published: 2006-07-12

Updated: 2017-07-20

Summary

Adobe Reader and Acrobat 6.0.4 and earlier, on Mac OSX, has insecure file and directory permissions, which allows local users to gain privileges by overwriting program files. This vulnerability only exists in multi-user environments. This vulnerability is addressed in the following product releases: Adobe, Acrobat Reader, 6.0.5 for Mac OSX Adobe, Acrobat, 6.0.5 for Mac OSX

Vulnerable Configurations

Part	Description	Count
Application	Adobe Adobe Acrobat 3.0 Adobe Acrobat 3.1 Adobe Acrobat 4.0 Adobe Acrobat 4.0.5 Adobe Acrobat 4.0.5A Adobe Acrobat 4.0.5C Adobe Acrobat 5.0 Adobe Acrobat 5.0.5 Adobe Acrobat 5.0.10 Adobe Acrobat 6.0 Adobe Acrobat 6.0.1 Adobe Acrobat 6.0.2 Adobe Acrobat 6.0.3 Adobe Acrobat * Adobe Acrobat Reader 3.0 Adobe Acrobat Reader 4.0 Adobe Acrobat Reader 4.0.5 Adobe Acrobat Reader 4.0.5A Adobe Acrobat Reader 4.0.5C Adobe Acrobat Reader 5.0 Adobe Acrobat Reader 5.0.5 Adobe Acrobat Reader 5.0.10 Adobe Acrobat Reader 5.1 Adobe Acrobat Reader 6.0 Adobe Acrobat Reader 6.0.1 Adobe Acrobat Reader 6.0.2 Adobe Acrobat Reader 6.0.3 Adobe Acrobat Reader *	28

Summary

Vulnerable Configurations

References