File permissions vulnerability in Adobe Photoshop

[Bellamy]

Security Advisory: File permissions vulnerability in Adobe Creative Suite 2 (Windows, Mac OS)

 

Release Date: February 2, 2006

 

Products: Adobe Creative Suite 2, Adobe Photoshop CS2, Adobe Illustrator CS2

 

Platform: Windows, Mac OS

 

Vulnerability Identifier: APSB06-01

 

Overview: Adobe has been made aware that the file and folder permissions for Photoshop CS2, Illustrator CS2, and Adobe Help Center can permit non-privileged users to change key program files. This condition presents a risk for shared, multi-user systems. Adobe is providing update utilities which correct these access permission issues and prevent manipulation of the program files by non-privileged users. Adobe recommends that customers using CS2 products on shared systems apply these updates.

 

Effect: If exploited, this vulnerability could allow a hostile user to replace these program files with malicious or harmful code that could read, write, or destroy sensitive data if subsequently run by a privileged user.

 

Details: The identified vulnerability allows non-privileged users permission to change key program files. This condition presents a risk for shared, multi-user systems. On such systems, a hostile user could take advantage of this condition to replace these program files with malicious or harmful code that could read, write, or destroy sensitive data if subsequently run by a privileged user.

 

Severity: Adobe categorizes this issue as an important issue and recommends that users patch their installations.

 

Recommendations: Download and install the AdobeSecurityPatcher from one of the following locations:

 

Adobe Illustrator CS2:

 

-- Windows:  http://www.adobe.com/support/downloads/detail.jsp?ftpID=3308

 

-- Mac OS: http://www.adobe.com/support/downloads/detail.jsp?ftpID=3307

 

Adobe Photoshop CS2:

 

-- Windows:  http://www.adobe.com/support/downloads/detail.jsp?ftpID=3306

 

-- Mac OS: http://www.adobe.com/support/downloads/detail.jsp?ftpID=3305

 

Adobe Creative Suite Premium:

 

-- Windows:  http://www.adobe.com/support/downloads/detail.jsp?ftpID=3304

 

-- Mac OS: http://www.adobe.com/support/downloads/detail.jsp?ftpID=3303

 

Adobe Creative Suite Standard:

 

-- Windows:  http://www.adobe.com/support/downloads/detail.jsp?ftpID=3230

 

-- Mac OS: http://www.adobe.com/support/downloads/detail.jsp?ftpID=3223

Source: http://www.adobe.com/support/techdocs/332644.html

 

Be aware. Adobe categorizes this issue as an important issue and recommends that users patch their installations.

[Krys]

thanks for the info Bellamy

[AllCeline]

I don't understand... are they saying that people are messing with key files to release viruses or to install Photoshop on multiple machines illigally?

 

Anyway... I'll be downloading the patch for sure!!

Edited February 6, 2006 by AllCeline

[Celine-Express]

tancks for the info