CVE-2009-3489
HIGHAdobe Photoshop Elements 8.0 - Incorrect Permission Assignment for Critical Resource in Active File Monitor Service
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2009-3489. PoCs published by bellick, pyrokinesis.
AI-analyzed exploit summary This exploit leverages a service binary path manipulation vulnerability in Adobe Active File Monitor 8.0 to achieve local privilege escalation by reconfiguring the service to execute arbitrary commands.
Description
Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, which allows local users to (1) stop the service via the stop command, (2) execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or (3) restart the service via the start command.
Exploits (2)
This exploit leverages a service binary path manipulation vulnerability in Adobe Active File Monitor 8.0 to achieve local privilege escalation by reconfiguring the service to execute arbitrary commands.
This exploit leverages an improper security descriptor in the Adobe Active File Monitor V8 service to allow local privilege escalation. A limited user can stop the service, modify its binary path to execute arbitrary commands, and restart it to gain SYSTEM privileges.
References (7)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H