CVE-2005-4708: High severity Adobe Contribute vulnerability

Published Dec 31, 2005

Updated

Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service with the Users group permitted to configure the service, including the path to executable, which allows local users to execute arbitrary code as Local System.

Affected Software

11 affected components

Adobe Contribute=3

Adobe Dreamweaver=9.0

Adobe Flash Player

Adobe Fireworks=9.0

Adobe Contribute=2

Adobe Freehand=mx

Adobe Director

Adobe eLicensing

Adobe Studio=mx

Adobe Captivate

Adobe Flash Player

Remediation

Patch Available

http://www.macromedia.com/devnet/security/security_zone/mpsb05-04.html

Event History

Dec 31, 2005

CVE Published

05:00 AM

Feb 2, 2006

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2005-4708?

CVE-2005-4708 is considered a critical vulnerability due to its potential for local users to execute arbitrary code as Local System.

How do I fix CVE-2005-4708?

To fix CVE-2005-4708, ensure that the Macromedia Licensing Service is configured to restrict permissions properly and apply any available software updates from Adobe.

What products are affected by CVE-2005-4708?

CVE-2005-4708 affects Adobe Macromedia MX 2004 products, including Captivate, Contribute 2, Contribute 3, and several other Adobe software.

Can CVE-2005-4708 be exploited remotely?

CVE-2005-4708 is mainly an issue for local users, as it involves local privilege escalation rather than remote exploitation.

Is there a workaround for CVE-2005-4708?

A possible workaround for CVE-2005-4708 is to restrict local user permissions on the Macromedia Licensing Service until a patch is applied.