CVE-2009-3489

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 2.0%

from disclosure to weapon0 days

Published on NVDSep 30

1st PoCSep 29

exploitation probability

2.0%top 22% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, which allows local users to (1) stop the service via the stop command, (2) execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or (3) restart the service via the start command.

Affected products

n/a · n/a

public PoCs found — 2✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/9988 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/9807

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://blogs.adobe.com/psirt/2009/09/potential_photoshop_elements_8.html http://retrogod.altervista.org/9sg_adobe_pe_local.html http://secunia.com/advisories/36895 http://www.securityfocus.com/archive/1/506806/100/0/threaded http://www.securityfocus.com/bid/36542 http://www.securitytracker.com/id?1022963 http://www.vupen.com/english/advisories/2009/2798