Privilege escalation in Adobe Acrobat and Adobe Reader - CVE-2009-2564

Vulnerability details

The vulnerability exists due to insecure permissions on the NOS directory in getPlus Download Manager. By replacing the getPlus_HelperSvc.exe file, an attacker could exploit this vulnerability to gain SYSTEM privileges.

Successful exploitation of this vulnerability may allow a local user to obtain full access to vulnerable system.

Affected software

How to mitigate CVE-2009-2564

Links to Public Exploits and PoC-codes

• Exploit #628 - Adobe Acrobat 9.1.2 NOS - Privilege Escalation (March 18, 2020)
• Exploit #629 - Adobe 9.x Related Service - 'getPlus_HelperSvc.exe' Privilege Escalation (March 18, 2020)

External References

• http://www.adobe.com/support/security/bulletins/apsb09-15.html

Related Security Bulletins

• Multiple vulnerabilities in Adobe Reader and Adobe Acrobat
• openSUSE update for flash-player