CVE-2002-1601

Published: Feb 9, 2002Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

The Connectables feature in Adobe PhotoDeluxe 3.1 prepends the Adobe directory to the CLASSPATH environment variable, which allows applets to run with higher privileges and remote attackers to gain privileges via an HTML e-mail message or a web page.

Affected (3)

Products: Adobe: Photodeluxe

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Adobe Photodeluxe	Version 3.0
Adobe Photodeluxe	Version 3.1
Adobe Photodeluxe	Version 4.0

References (8)

http://www.kb.cert.org/vuls/id/116875

Source: cve@mitre.org

US Government Resource

http://www.kb.cert.org/vuls/id/AAMN-56LQ2J

Source: cve@mitre.org

US Government Resource

http://www.securityfocus.com/bid/4106

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/8210

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/116875

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.kb.cert.org/vuls/id/AAMN-56LQ2J

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.securityfocus.com/bid/4106

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/8210

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.