NOS Microsystems getPlus Download Manager, as used in Adobe Reader 1.6.2.36 and possibly other versions, Corel getPlus Download Manager…

Description

NOS Microsystems getPlus Download Manager, as used in Adobe Reader 1.6.2.36 and possibly other versions, Corel getPlus Download Manager before 1.5.0.48, and possibly other products, installs NOS\bin\getPlus_HelperSvc.exe with insecure permissions (Everyone:Full Control), which allows local users to gain SYSTEM privileges by replacing getPlus_HelperSvc.exe with a Trojan horse program, as demonstrated by use of getPlus Download Manager within Adobe Reader. NOTE: within Adobe Reader, the scope of this issue is limited because the program is deleted and the associated service is not automatically launched after a successful installation and reboot.

Scores

EPSS (exploitation in 30 days)

5.6% · top 7.1% of all CVEs (5 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.2.

Weakness

• n/a
• CWE-264 (opens in a new tab)All about CWE-264 and its CVEs

Affected products

• n/a

  • affected n/a

References (14)

• 9199 (opens in a new tab)exploitx_refsource_EXPLOIT-DBx_transferred
• TA09-286B (opens in a new tab)third-party-advisoryx_refsource_CERTx_transferred
• 1023007 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
• http://www.adobe.com/support/security/bulletins/apsb09-15.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• oval:org.mitre.oval:def:5719 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
• 35740 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• ADV-2009-1969 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• http://retrogod.altervista.org/9sg_adobe_local.html (opens in a new tab)x_refsource_MISCx_transferred
• getplus-nos-insecure-permissions(54383) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• 35930 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 20090720 Adobe related service (getPlus_HelperSvc.exe) local elevation of privileges (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• ADV-2009-2898 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 36331 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://blogs.adobe.com/psirt/2009/07/local_privilege_escalation_in.html (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2009-2564](https://trackcve.app/badge/CVE-2009-2564.svg)](https://trackcve.app/cve/CVE-2009-2564)

Record last updated 7 Aug 2024, 05:52 UTC.