Adobe Version Cue vulnerabilities

4 CVEs affecting Adobe Version Cue, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-0525, published 2006-02-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2005-1307, published 2005-05-17. High severity, CVSS 7.2. EPSS: 3.7% chance of exploitation in the next 30 days. The (1) stopserver.sh and (2) startserver.sh scripts in Adobe Version Cue on Mac OS X uses the current working directory to find and execute the productname.sh script, which allows local users to…
CVE-2006-0525, published 2006-02-02. Medium severity, CVSS 4.6. EPSS: 1.3% chance of exploitation in the next 30 days. Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large number of .EXE and .DLL files with write-access permission for the Everyone…
CVE-2005-1843, published 2005-08-24. Medium severity, CVSS 4.6. EPSS: 1.2% chance of exploitation in the next 30 days. VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, allows local users to load arbitrary libraries and…
CVE-2005-1842, published 2005-08-24. Low severity, CVSS 2.1. EPSS: 0.9% chance of exploitation in the next 30 days. VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, creates temporary log files with predictable names, which…