PT-2007-2696 · Adobe · Bridge

Publicado 2007-04-11 · Atualizado 2017-07-29 · CVE-2007-1279

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Bridge version 1.0.3

Description The issue concerns an unspecified vulnerability in the installer for Adobe Bridge. It allows local users to gain privileges via unspecified vectors during the installation of the update by a different user who has administrative privileges, specifically when patching with desktop management tools.

Recommendations For Adobe Bridge version 1.0.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-1279

Produtos afetados

Bridge

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-1279 · Nota de Segurança
• http://vupen.com/english/advisories/2007/1342 · Aviso do Fabricante
• http://osvdb.org/34896 · Nota
• http://adobe.com/support/security/bulletins/apsb07-09.html · Aviso do Fabricante
• http://securitytracker.com/id?1017900 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33570 · Nota
• http://securityfocus.com/bid/23404 · Nota
• http://secunia.com/advisories/24854 · Aviso do Fabricante