CVE-2002-1601

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-02-09 · updated 2026-06-16

Description

The Connectables feature in Adobe PhotoDeluxe 3.1 prepends the Adobe directory to the CLASSPATH environment variable, which allows applets to run with higher privileges and remote attackers to gain privileges via an HTML e-mail message or a web page.

Affected products

Adobe Photodeluxe: 3.0, 3.1, 4.0

References

http://www.kb.cert.org/vuls/id/116875
http://www.kb.cert.org/vuls/id/AAMN-56LQ2J
http://www.securityfocus.com/bid/4106
https://exchange.xforce.ibmcloud.com/vulnerabilities/8210
http://www.kb.cert.org/vuls/id/116875
http://www.kb.cert.org/vuls/id/AAMN-56LQ2J
http://www.securityfocus.com/bid/4106
https://exchange.xforce.ibmcloud.com/vulnerabilities/8210

Get alerted when CVE-2002-1601 or the next vulnerability affects your stack