Unscored severity · published Dec 31, 2004
CVE-2004-2335
The Macromedia installers and e-licensing client on Mac OS X, as used for Macromedia Contribute 2, Director, Dreamweaver, Fireworks, Flash, and Studio, install the…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The Macromedia installers and e-licensing client on Mac OS X, as used for Macromedia Contribute 2, Director, Dreamweaver, Fireworks, Flash, and Studio, install the AuthenticationService setuid and writable by other users, which allows local users to gain privileges by modifying the program.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Contribute · Macromedia
2.0 · source: NVD
ST
Studio · Macromedia
2004 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-2335
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-2335
secunia.com
http://secunia.com/advisories/11123
Patch
http://www.macromedia.com/devnet/security/security_zone/mpsb04-03.html
Patch
http://www.securityfocus.com/bid/9862
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/15465