CVE-2006-3452 — Adobe Acrobat vulnerability

2 documents2 sources
Severity
4.6MEDIUMNVD
EPSS
0.1%
top 70.00%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Adobe AcrobatAdobe Acrobat Reader
Timeline
PublishedJul 12
Latest updateMay 1

Description

Adobe Reader and Acrobat 6.0.4 and earlier, on Mac OSX, has insecure file and directory permissions, which allows local users to gain privileges by overwriting program files.

CVSS vector

AV:L/AC:L/C:P/I:P/A:PExploitability: 3.9 | Impact: 6.4

Affected Packages2 packages

▶NVDadobe/acrobat_reader6.0.4+13
▶NVDadobe/acrobat6.0.4+13

Patches

Patch: secunia.com ↗Patch: www.adobe.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-8m2m-9hff-5cqp: Adobe Reader and Acrobat 6↗2022-05-01
▶
CVE-2006-3452 — Adobe Acrobat vulnerability | cvebase