Vulnerabilities > Adobe

DATE CVE VULNERABILITY TITLE RISK
2005-12-31 CVE-2005-4708 Local Privilege Escalation vulnerability in Macromedia eLicensing Client Activation Code
Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service with the Users group permitted to configure the service, including the path to executable, which allows local users to execute arbitrary code as Local System.
local
low complexity
adobe
7.2
2005-12-31 CVE-2005-3525 Buffer Overflow vulnerability in Macromedia Shockwave Player ActiveX Control
Stack-based buffer overflow in an ActiveX control for the installer for Adobe Macromedia Shockwave Player 10.1.0.11 and earlier allows remote attackers to execute arbitrary code via crafted large values for unspecified parameters.
network
adobe
critical
9.3
2005-08-24 CVE-2005-1843 Local Privilege Escalation vulnerability in Adobe Version Cue for Mac OS X
VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, allows local users to load arbitrary libraries and execute arbitrary code via the -lib command line argument.
local
low complexity
adobe
4.6
2005-08-24 CVE-2005-1842 Local Privilege Escalation vulnerability in Adobe Version Cue for Mac OS X
VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, creates temporary log files with predictable names, which allows local users to modify arbitrary files via a symlink attack.
local
low complexity
adobe
2.1
2005-08-16 CVE-2005-2470 Remote Buffer Overflow vulnerability in Adobe Acrobat and Adobe Reader
Buffer overflow in a "core application plug-in" for Adobe Reader 5.1 through 7.0.2 and Acrobat 5.0 through 7.0.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.
network
low complexity
adobe
7.5
2005-07-07 CVE-2005-1841 Unspecified vulnerability in Adobe Acrobat Reader 5.0.10/5.0.9
The control for Adobe Reader 5.0.9 and 5.0.10 on Linux, Solaris, HP-UX, and AIX creates temporary files with the permissions as specified in a user's umask, which could allow local users to read PDF documents of that user if the umask allows it.
local
low complexity
adobe
2.1
2005-07-05 CVE-2005-1625 Unspecified vulnerability in Adobe Acrobat Reader 5.0.10/5.0.9
Stack-based buffer overflow in the UnixAppOpenFilePerform function in Adobe Reader 5.0.9 and 5.0.10 for Unix allows remote attackers to execute arbitrary code via a PDF document with a long /Filespec tag.
network
low complexity
adobe
5.0
2005-06-15 CVE-2005-1306 XXE vulnerability in Adobe Acrobat and Acrobat Reader
The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML External Entity vulnerability."
network
low complexity
adobe CWE-611
7.5
2005-06-13 CVE-2005-0151 Unspecified vulnerability in Adobe Creative Suite, Photoshop and Premiere
Unknown vulnerability in the installation of Adobe License Management Service, as used in Adobe Photoshop CS, Adobe Creative Suite 1.0, and Adobe Premiere Pro 1.5, allows attackers to gain administrator privileges.
network
low complexity
adobe
7.5
2005-05-17 CVE-2005-1307 Local Privilege Escalation vulnerability in Adobe Version Cue
The (1) stopserver.sh and (2) startserver.sh scripts in Adobe Version Cue on Mac OS X uses the current working directory to find and execute the productname.sh script, which allows local users to execute arbitrary code by copying and calling the scripts from a user-controlled directory.
local
low complexity
adobe apple
7.2