CVE-2006-3452: Medium severity Adobe Acrobat vulnerability
Published Jul 12, 2006
·Updated
Adobe Reader and Acrobat 6.0.4 and earlier, on Mac OSX, has insecure file and directory permissions, which allows local users to gain privileges by overwriting program files.
Affected Software
28 affected components
Adobe Acrobat<=6.0.4
Adobe Acrobat=3.0
Adobe Acrobat=3.1
Adobe Acrobat=4.0
Adobe Acrobat=4.0.5
Adobe Acrobat=4.0.5a
Adobe Acrobat=4.0.5c
Adobe Acrobat=5.0
Adobe Acrobat=5.0.5
Adobe Acrobat=5.0.10
Adobe Acrobat=6.0
Adobe Acrobat=6.0.1
Adobe Acrobat=6.0.2
Adobe Acrobat=6.0.3
Adobe Acrobat reader<=6.0.4
Adobe Acrobat reader=3.0
Adobe Acrobat reader=4.0
Adobe Acrobat reader=4.0.5
Adobe Acrobat reader=4.0.5a
Adobe Acrobat reader=4.0.5c
Adobe Acrobat reader=5.0
Adobe Acrobat reader=5.0.5
Adobe Acrobat reader=5.0.10
Adobe Acrobat reader=5.1
Adobe Acrobat reader=6.0
Adobe Acrobat reader=6.0.1
Adobe Acrobat reader=6.0.2
Adobe Acrobat reader=6.0.3
Remediation
Patch Available
Patch Available
Event History
Jul 12, 2006
CVE Published
10:05 PM
Jul 13, 2006
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-3452?
CVE-2006-3452 has a high severity rating due to the risk of privilege escalation for local users.
2
How do I fix CVE-2006-3452?
To fix CVE-2006-3452, upgrade Adobe Reader and Acrobat to version 6.0.5 or later.
3
What software versions are affected by CVE-2006-3452?
CVE-2006-3452 affects Adobe Reader and Acrobat versions 6.0.4 and earlier on Mac OSX.
4
Can CVE-2006-3452 be exploited by remote attackers?
CVE-2006-3452 cannot be exploited remotely as it requires local access to the affected system.
5
What types of privileges can be gained through CVE-2006-3452?
CVE-2006-3452 allows local users to gain elevated privileges by overwriting program files.