High severity7.8NVD Advisory· Published Sep 30, 2009· Updated Jun 16, 2026
CVE-2009-3489
CVE-2009-3489
Description
Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, which allows local users to (1) stop the service via the stop command, (2) execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or (3) restart the service via the start command.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:adobe:photoshop_elements:8.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:adobe:photoshop_elements:8.0:*:*:*:*:*:*:*
- (no CPE)range: =8.0
Patches
Vulnerability mechanics
References
7- retrogod.altervista.org/9sg_adobe_pe_local.htmlnvdBroken LinkExploit
- www.securityfocus.com/bid/36542nvdBroken LinkExploitThird Party AdvisoryVDB Entry
- www.securityfocus.com/archive/1/506806/100/0/threadednvdBroken LinkThird Party AdvisoryVDB Entry
- www.securitytracker.com/idnvdBroken LinkThird Party AdvisoryVDB Entry
- blogs.adobe.com/psirt/2009/09/potential_photoshop_elements_8.htmlnvdBroken Link
- secunia.com/advisories/36895nvdBroken Link
- www.vupen.com/english/advisories/2009/2798nvdPermissions Required
News mentions
0No linked articles in our index yet.