CVE-2008-3961 - Multiple unspecified vulnerabilities in Adobe Illustrator CS2 on Macintosh allow user-assisted attac

CVE-2008-3961

Summary

Multiple unspecified vulnerabilities in Adobe Illustrator CS2 on Macintosh allow user-assisted attackers to execute arbitrary code via a crafted AI file.

References

http://secunia.com/advisories/31902
http://www.adobe.com/support/security/advisories/apsa08-07.html
http://www.securityfocus.com/bid/31208
http://www.securitytracker.com/id?1020892
http://www.vupen.com/english/advisories/2008/2600
https://exchange.xforce.ibmcloud.com/vulnerabilities/45180

Vulnerable Configurations

cpe:2.3:a:adobe:illustrator:cs2:*:mac:*:*:*:*:*
cpe:2.3:a:adobe:illustrator:cs2:*:mac:*:*:*:*:*

CVSS

Base:	9.3 (as of 08-08-2017 - 01:32)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:M/Au:N/C:C/I:C/A:C

refmap via4

bid	31208
confirm	http://www.adobe.com/support/security/advisories/apsa08-07.html
sectrack	1020892
secunia	31902
vupen	ADV-2008-2600
xf	adobe-illustrator-ai-code-execution(45180)

Last major update

08-08-2017 - 01:32

Published

18-09-2008 - 15:04

Last modified

08-08-2017 - 01:32