Medium 4.6Published Feb 2, 2006

CVE-2006-0525Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large number of .EXE and .DLL files with write-access permission for the Everyone group…

Updated under an hour ago (Nov 2, 2026, 3:00 AM ET)

Does this affect you?

It affects adobe acrobat and 8 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stackFree account, 3 products Every CVE for adobe acrobat Exploited in the last 30 days

Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large number of .EXE and .DLL files with write-access permission for the Everyone group, which allows local users to gain privileges via Trojan horse programs.

CVSS: 4.6 MEDIUM (v2.0, NVD)AV:L/AC:L/Au:N/C:P/I:P/A:P
Weakness (CWE): CWE-264
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Not given
NVD analysis: Modified
Record last updated: Jun 16, 2026
First seen by InfoSec Signals: Nov 1, 2026

Affected products

Affected products

adobe acrobat adobe:acrobat	3.0; 3.1; 4.0; 4.0.5; 4.0.5a; 4.0.5c; 5.0; 5.0.5; and 10 more ranges	NVD
adobe acrobat_reader adobe:acrobat_reader	3.0; 4.0; 4.0.5; 4.0.5a; 4.0.5c; 4.5; 5.0; 5.0.5; and 11 more ranges	NVD
adobe creative_suite adobe:creative_suite	1.0; 1.3; 2.0	NVD
adobe illustrator adobe:illustrator	7.0; 8.0; 9.0; 10.0; cs; cs3	NVD
adobe indesign adobe:indesign	cs; cs3	NVD
adobe pagemaker adobe:pagemaker	6.5; 6.5; 7.0; 7.0	NVD
adobe photoshop adobe:photoshop	7.0; 8.0; 9.0.2; le	NVD
adobe premiere adobe:premiere	1.5	NVD
adobe version_cue adobe:version_cue	1.0; 1.0.1; gold	NVD

References

References

http://secunia.com/advisories/18698	vendor-advisory
http://securitytracker.com/id?1015577
http://securitytracker.com/id?1015578
http://securitytracker.com/id?1015579
http://www.adobe.com/support/techdocs/332644.html
http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf
http://www.kb.cert.org/vuls/id/953860	third-party-advisory, us-government-resource
http://www.osvdb.org/22908
http://www.securityfocus.com/archive/1/423587/100/0/threaded
http://www.securityfocus.com/bid/16451
1–10 of 12

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.