Technical Description

A vulnerability has been identified in Adobe getPlus Download Manager, which could be exploited by local attackers to gain elevated privileges. This issue is caused due to insecure permissions being set on the "%ProgramFiles%\NOS\" directory (Full Control), which could be exploited by malicious users to replace certain files (e.g. \bin\getPlus_HelperSvc.exe) with malicious binaries that will be executed with SYSTEM privileges.

Affected Products

Adobe getPlus Download Manager

Solution

Upgrade to the latest version.

References

http://www.vupen.com/english/advisories/2009/1969
http://blogs.adobe.com/psirt/2009/08/new_version_of_adobe_reader_do.html

Credits

Vulnerability reported by Nine:Situations:Group.

ChangeLog

2009-07-21 : Initial release
2009-08-27 : Updated Solution

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts with CVE, CWE, and CVSS when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.