CVE-2002-1601 | BDVDB-2026-8907 Detail

Description#

The Connectables feature in Adobe PhotoDeluxe 3.1 prepends the Adobe directory to the CLASSPATH environment variable, which allows applets to run with higher privileges and remote attackers to gain privileges via an HTML e-mail message or a web page.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.kb.cert.org/vuls/id/AAMN-56LQ2J
http://www.kb.cert.org/vuls/id/116875
http://www.securityfocus.com/bid/4106
https://exchange.xforce.ibmcloud.com/vulnerabilities/8210

Exploit#

No public exploit known

History#

Version 12005-03-20Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.