CVE-2009-3489
First published: Wed Sep 30 2009(Updated: )
Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, which allows local users to (1) stop the service via the stop command, (2) execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or (3) restart the service via the start command.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Photoshop Elements | =8.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/36542
- http://retrogod.altervista.org/9sg_adobe_pe_local.html
- http://www.securitytracker.com/id?1022963
- http://blogs.adobe.com/psirt/2009/09/potential_photoshop_elements_8.html
- http://secunia.com/advisories/36895
- http://www.vupen.com/english/advisories/2009/2798
- http://www.securityfocus.com/archive/1/506806/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2009-3489?
CVE-2009-3489 is classified as a high severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-2009-3489?
To fix CVE-2009-3489, ensure that you apply the latest security patches from Adobe for Photoshop Elements 8.0.
Who is affected by CVE-2009-3489?
CVE-2009-3489 affects users of Adobe Photoshop Elements version 8.0 on Windows systems.
Can CVE-2009-3489 be exploited remotely?
CVE-2009-3489 cannot be exploited remotely; it requires local access to the affected system.
What actions can be taken by an attacker exploiting CVE-2009-3489?
An attacker exploiting CVE-2009-3489 can stop the Adobe Active File Monitor service, execute arbitrary commands as SYSTEM, and modify service configurations.
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/severity
- agent/author
- agent/references
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/tags
- agent/source
- vendor/adobe
- canonical/adobe photoshop elements
- version/adobe photoshop elements/8.0