Vulnerability Description
Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, which allows local users to (1) stop the service via the stop command, (2) execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or (3) restart the service via the start command.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Photoshop Elements | 8.0 |
Related Weaknesses (CWE)
References
- http://blogs.adobe.com/psirt/2009/09/potential_photoshop_elements_8.htmlBroken Link
- http://retrogod.altervista.org/9sg_adobe_pe_local.htmlBroken LinkExploit
- http://secunia.com/advisories/36895Broken Link
- http://www.securityfocus.com/archive/1/506806/100/0/threadedBroken LinkThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/36542Broken LinkExploitThird Party Advisory
- http://www.securitytracker.com/id?1022963Broken LinkThird Party AdvisoryVDB Entry
- http://www.vupen.com/english/advisories/2009/2798Permissions Required
- http://blogs.adobe.com/psirt/2009/09/potential_photoshop_elements_8.htmlBroken Link
- http://retrogod.altervista.org/9sg_adobe_pe_local.htmlBroken LinkExploit
- http://secunia.com/advisories/36895Broken Link
- http://www.securityfocus.com/archive/1/506806/100/0/threadedBroken LinkThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/36542Broken LinkExploitThird Party Advisory
- http://www.securitytracker.com/id?1022963Broken LinkThird Party AdvisoryVDB Entry
- http://www.vupen.com/english/advisories/2009/2798Permissions Required
FAQ
What is CVE-2009-3489?
CVE-2009-3489 is a vulnerability with a CVSS score of 7.8 (HIGH). Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, which allows local users to (1) stop the service via the stop command, (2) execute ...
How severe is CVE-2009-3489?
CVE-2009-3489 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-3489?
Check the references section above for vendor advisories and patch information. Affected products include: Adobe Photoshop Elements.