CVE-2005-4708
Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service with the Users group permitted to configure the service, including the path to executable, which allows local users…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.22%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service with the Users group permitted to configure the service, including the path to executable, which allows local users to execute arbitrary code as Local System.
- CVSS 2.0
- 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 1.22% probability · 67th percentile
- CISA KEV
- Not listed
- Affected
- adobe/captivate · adobe/contribute · adobe/director · adobe/dreamweaver · adobe/elicensing · adobe/fireworks · adobe/flash player · adobe/freehand · adobe/studio
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/15654
- http://securitytracker.com/id?1014158
- http://securitytracker.com/id?1014159
- http://securitytracker.com/id?1014160
- http://securitytracker.com/id?1014161
- http://securitytracker.com/id?1014162
- http://securitytracker.com/id?1014163
- http://securitytracker.com/id?1014164
- http://securitytracker.com/id?1014165
- http://securitytracker.com/id?1014166
- http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf
- http://www.kb.cert.org/vuls/id/953860US Government Resource
- http://www.macromedia.com/devnet/security/security_zone/mpsb05-04.htmlPatch, Vendor Advisory
- http://www.osvdb.org/17248
- http://www.securityfocus.com/archive/1/423587/100/0/threaded
- http://www.securityfocus.com/bid/13925
- http://www.vupen.com/english/advisories/2005/0723
- http://secunia.com/advisories/15654
- http://securitytracker.com/id?1014158
- http://securitytracker.com/id?1014159
- http://securitytracker.com/id?1014160
- http://securitytracker.com/id?1014161
- http://securitytracker.com/id?1014162
- http://securitytracker.com/id?1014163
- http://securitytracker.com/id?1014164
- http://securitytracker.com/id?1014165
- http://securitytracker.com/id?1014166
- http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf
- http://www.kb.cert.org/vuls/id/953860US Government Resource
- http://www.macromedia.com/devnet/security/security_zone/mpsb05-04.htmlPatch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.