PT-2007-2696 · Adobe · Bridge

Published 2007-04-11 · Updated 2017-07-29 · CVE-2007-1279

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Bridge version 1.0.3

Description The issue concerns an unspecified vulnerability in the installer for Adobe Bridge. It allows local users to gain privileges via unspecified vectors during the installation of the update by a different user who has administrative privileges, specifically when patching with desktop management tools.

Recommendations For Adobe Bridge version 1.0.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-1279

Affected Products

Bridge

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-1279 · Security Note
• http://vupen.com/english/advisories/2007/1342 · Vendor Advisory
• http://adobe.com/support/security/bulletins/apsb07-09.html · Vendor Advisory
• http://securitytracker.com/id?1017900 · Vendor Advisory
• http://secunia.com/advisories/24854 · Vendor Advisory
• http://osvdb.org/34896 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33570 · Note
• http://securityfocus.com/bid/23404 · Note