CVE-2009-3489

Severity

69%

Complexity

34%

Confidentiality

165%

Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, which allows local users to (1) stop the service via the stop command, (2) execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or (3) restart the service via the start command.

Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, which allows local users to (1) stop the service via the stop command, (2) execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or (3) restart the service via the start command.

CVSS 2.0 Base Score 6.9. CVSS Attack Vector: local. CVSS Attack Complexity: medium. CVSS Vector: (AV:L/AC:M/Au:N/C:C/I:C/A:C).

Overview

First reported 15 years ago

2009-09-30 15:30:00

Last updated 6 years ago

2018-10-10 19:43:00

Affected Software

Adobe PhotoShop Elements 8.0

8.0

References

http://blogs.adobe.com/psirt/2009/09/potential_photoshop_elements_8.html

http://retrogod.altervista.org/9sg_adobe_pe_local.html

Exploit

36895

20090929 Adobe Photoshop Elements 8.0 Active File Monitor Service Bad Security Descriptor Local Elevation Of Privileges

36542

Exploit

1022963

ADV-2009-2798

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.