CVE-2005-4708

Published: Dec 31, 2005Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service with the Users group permitted to configure the service, including the path to executable, which allows local users to execute arbitrary code as Local System.

Affected (11)

Products: Adobe: Captivate, Contribute, Director, Dreamweaver, Elicensing, Fireworks, Flash Player, Freehand, Studio

9 products

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Adobe Captivate	All versions
Adobe Contribute	Version 2
Adobe Contribute	Version 3
Adobe Director	All versions
Adobe Dreamweaver	Version 9.0
Adobe Elicensing	All versions
Adobe Fireworks	Version 9.0
Adobe Flash Player	All versions
Adobe Flash Player	All versions
Adobe Freehand	Version mx
Adobe Studio	Version mx

References (34)

http://secunia.com/advisories/15654

Source: cve@mitre.org

http://securitytracker.com/id?1014158

Source: cve@mitre.org

http://securitytracker.com/id?1014159

Source: cve@mitre.org

http://securitytracker.com/id?1014160

Source: cve@mitre.org

http://securitytracker.com/id?1014161

Source: cve@mitre.org

http://securitytracker.com/id?1014162

Source: cve@mitre.org

http://securitytracker.com/id?1014163

Source: cve@mitre.org

http://securitytracker.com/id?1014164

Source: cve@mitre.org

http://securitytracker.com/id?1014165

Source: cve@mitre.org

http://securitytracker.com/id?1014166

Source: cve@mitre.org

http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/953860

Source: cve@mitre.org

US Government Resource

http://www.macromedia.com/devnet/security/security_zone/mpsb05-04.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.osvdb.org/17248

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/423587/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/13925

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/0723

Source: cve@mitre.org

http://secunia.com/advisories/15654

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1014158

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1014159

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1014160

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1014161

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1014162

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1014163

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1014164

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1014165

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1014166

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/953860

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.macromedia.com/devnet/security/security_zone/mpsb05-04.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.osvdb.org/17248

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/423587/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/13925

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2005/0723

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.