PT-2007-3999 · Adobe+1 · Version Cue Cs3 Server+1

Published 2007-05-18 · Updated 2017-07-29 · CVE-2007-2682

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adobe Version Cue CS3 Server version

Description The issue arises from the installer for Adobe Version Cue CS3 Server on Apple Mac OS X, which is used in Adobe Creative Suite 3 (CS3). It fails to re-enable the personal firewall after completing the product installation. This allows remote attackers to bypass intended firewall rules.

Recommendations For Adobe Version Cue CS3 Server, manually re-enable the personal firewall after installation to prevent exploitation.

Fix

Related Identifiers

CVE-2007-2682

Affected Products

Version Cue Cs3 Server

Macos X

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-2682 · Security Note
• http://adobe.com/support/security/bulletins/apsb07-11.html · Vendor Advisory
• http://securitytracker.com/id?1018075 · Vendor Advisory
• http://secunia.com/advisories/25291 · Vendor Advisory
• http://osvdb.org/35868 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34342 · Note
• http://vupen.com/english/advisories/2007/1850 · Note
• http://securityfocus.com/bid/24027 · Note