First published: Wed Jul 12 2006(Updated: )
Adobe Reader and Acrobat 6.0.4 and earlier, on Mac OSX, has insecure file and directory permissions, which allows local users to gain privileges by overwriting program files.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Acrobat Reader | =4.0.5a | |
Adobe Acrobat Reader | =6.0.3 | |
Adobe Acrobat Reader | =6.0 | |
Adobe Acrobat Reader | =6.0.1 | |
Adobe Acrobat Reader | =6.0.2 | |
Adobe Acrobat Reader | =4.0.5 | |
Adobe Acrobat Reader | =6.0 | |
Adobe Acrobat Reader | =6.0.3 | |
Adobe Acrobat Reader | =3.0 | |
Adobe Acrobat Reader | =3.0 | |
Adobe Acrobat Reader | =4.0 | |
Adobe Acrobat Reader | =4.0.5c | |
Adobe Acrobat Reader | =5.0.5 | |
Adobe Acrobat Reader | =4.0.5 | |
Adobe Acrobat Reader | =5.0.5 | |
Adobe Acrobat Reader | =4.0.5c | |
Adobe Acrobat Reader | =5.0.10 | |
Adobe Acrobat Reader | =4.0.5a | |
Adobe Acrobat Reader | <=6.0.4 | |
Adobe Acrobat Reader | =5.0.10 | |
Adobe Acrobat Reader | =3.1 | |
Adobe Acrobat Reader | =5.0 | |
Adobe Acrobat Reader | =6.0.2 | |
Adobe Acrobat Reader | =5.1 | |
Adobe Acrobat Reader | =5.0 | |
Adobe Acrobat Reader | =6.0.1 | |
Adobe Acrobat Reader | <=6.0.4 | |
Adobe Acrobat Reader | =4.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-3452 has a high severity rating due to the risk of privilege escalation for local users.
To fix CVE-2006-3452, upgrade Adobe Reader and Acrobat to version 6.0.5 or later.
CVE-2006-3452 affects Adobe Reader and Acrobat versions 6.0.4 and earlier on Mac OSX.
CVE-2006-3452 cannot be exploited remotely as it requires local access to the affected system.
CVE-2006-3452 allows local users to gain elevated privileges by overwriting program files.