CVE-2006-3452

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-07-12 · updated 2026-06-16

Description

Adobe Reader and Acrobat 6.0.4 and earlier, on Mac OSX, has insecure file and directory permissions, which allows local users to gain privileges by overwriting program files.

Affected products

Adobe Acrobat for Edge: through 6.0.4; 3.0, 3.1, 4.0, 4.0.5, 4.0.5a, 4.0.5c (+7)
Adobe Acrobat Reader: through 6.0.4; 3.0, 4.0, 4.0.5, 4.0.5a, 4.0.5c, 5.0 (+7)

References

http://secunia.com/advisories/21016
http://securitytracker.com/id?1016473
http://www.adobe.com/support/security/bulletins/apsb06-08.html
http://www.osvdb.org/27157
http://www.securityfocus.com/bid/18945
http://www.vupen.com/english/advisories/2006/2758
https://exchange.xforce.ibmcloud.com/vulnerabilities/27678
http://secunia.com/advisories/21016
http://securitytracker.com/id?1016473
http://www.adobe.com/support/security/bulletins/apsb06-08.html
http://www.osvdb.org/27157
http://www.securityfocus.com/bid/18945

Get alerted when CVE-2006-3452 or the next vulnerability affects your stack