VulnerabilityModified

CVE-2009-3489

Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, which allows local users to (1) stop the service via the stop command, (2) execute arbitrary commands as SYSTEM by using the config…

HIGH 7.8EPSS 1.95%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.95%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 3.1: 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 1.95% probability · 79th percentile
CISA KEV: Not listed
Weakness: CWE-732
Affected: adobe/photoshop elements
Source: cve@mitre.org

References

http://blogs.adobe.com/psirt/2009/09/potential_photoshop_elements_8.htmlBroken Link
http://retrogod.altervista.org/9sg_adobe_pe_local.htmlBroken Link, Exploit
http://secunia.com/advisories/36895Broken Link
http://www.securityfocus.com/archive/1/506806/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/36542Broken Link, Exploit, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1022963Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2009/2798Permissions Required
http://blogs.adobe.com/psirt/2009/09/potential_photoshop_elements_8.htmlBroken Link
http://retrogod.altervista.org/9sg_adobe_pe_local.htmlBroken Link, Exploit
http://secunia.com/advisories/36895Broken Link
http://www.securityfocus.com/archive/1/506806/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/36542Broken Link, Exploit, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1022963Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2009/2798Permissions Required

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.