CVE-2005-4708

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-12-31 · updated 2026-06-16

Description

Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service with the Users group permitted to configure the service, including the path to executable, which allows local users to execute arbitrary code as Local System.

Affected products

Adobe Captivate 9 and earlier.: all versions
Adobe Contribute: 2, 3
Adobe Director: all versions
Adobe Dreamweaver Desktop: 9.0
Adobe Elicensing: all versions
Adobe Fireworks: 9.0
Adobe Flash Player 24.0.0.186 and earlier.: all versions
Adobe Freehand: mx
Adobe Studio: mx

References

http://secunia.com/advisories/15654
http://securitytracker.com/id?1014158
http://securitytracker.com/id?1014159
http://securitytracker.com/id?1014160
http://securitytracker.com/id?1014161
http://securitytracker.com/id?1014162
http://securitytracker.com/id?1014163
http://securitytracker.com/id?1014164
http://securitytracker.com/id?1014165
http://securitytracker.com/id?1014166
http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf
http://www.kb.cert.org/vuls/id/953860

Get alerted when CVE-2005-4708 or the next vulnerability affects your stack