Adobe Version Cue Local Privilege Escalation Vulnerability

Bugtraq ID:	11833
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Dec 07 2004 12:00AM
Updated:	Dec 07 2004 12:00AM
Credit:	fintler <[email protected]> is credited with the discovery of this issue.
Vulnerable:	Adobe Version Cue + Adobe Illustrator CS + Adobe InDesign CS + Adobe InDesign + Adobe Photoshop CS
Not Vulnerable:

Adobe Version Cue Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability reportedly affects Adobe Version Cue. This issue is due to a failure of the application to validate its environment, allowing an attacker to run arbitrary script code.

It should be noted that this issue reportedly only affects Adobe Version Cue on Mac OS X platforms.

An attacker may exploit this issue to have arbitrary scripts run with superuser privileges. This will facilitate privileges escalation.

Adobe Version Cue Local Privilege Escalation Vulnerability

No exploit is required to leverage this issue. An exploit is available:

• /data/vulnerabilities/exploits/actionspider.c

Adobe Version Cue Local Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Adobe Version Cue Local Privilege Escalation Vulnerability

References:

• Adobe Version Cue Home Page (Adobe)
  
• Local root exploit on Mac OS X with Adobe Version Cue (fintler )