CVE-2004-2335

Published: Dec 31, 2004Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

The Macromedia installers and e-licensing client on Mac OS X, as used for Macromedia Contribute 2, Director, Dreamweaver, Fireworks, Flash, and Studio, install the AuthenticationService setuid and writable by other users, which allows local users to gain privileges by modifying the program.

Affected (2)

Products: Macromedia: Contribute, Studio

2 products

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Macromedia Contribute	Version 2.0
Macromedia Studio	Version 2004

References (8)

http://secunia.com/advisories/11123

Source: cve@mitre.org

http://www.macromedia.com/devnet/security/security_zone/mpsb04-03.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/9862

Source: cve@mitre.org

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/15465

Source: cve@mitre.org

http://secunia.com/advisories/11123

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.macromedia.com/devnet/security/security_zone/mpsb04-03.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/9862

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/15465

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.