Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2005-4708: Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Ma

42
This month
HIGH 7.2MITIGATEDOWNGRADEMITIGATE

CVE-2005-4708 is a high-severity flaw (CVSS 7.2) affecting captivate, contribute, director. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service with the Users group permitted to configure the service, including the path to executable, which allows local users to execute arbitrary code as Local System.

Why this priority

  • High severity

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score7.2 (High)
EPSS exploit chance1.2% (top 31%)
CISA exploited listNo
Published2005-12-31
Last modified2026-06-16
Publisher (CNA): MITRE · Vendor: adobe

Share: LinkedIn · X · Reddit

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

adobe captivate MITIGATE
Affected: all versions
Fixed in: no fixed release known
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy captivate || rpm -q captivate || captivate --version
No fixed or unaffected release known
Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.
adobe contribute DOWNGRADE
Affected: 2 · 3
Fixed in: no fixed release known
Safe to downgrade to: a release before 2
1. Check installed version
apt-cache policy contribute || rpm -q contribute || contribute --version
2. No fixed release: DOWNGRADE to a release before 2 (Debian / Ubuntu)
apt-cache madison contribute sudo apt install contribute=<VERSION_BEFORE_2> sudo apt-mark hold contribute
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list contribute sudo dnf downgrade contribute-<VERSION_BEFORE_2> sudo dnf versionlock add contribute
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
adobe director MITIGATE
Affected: all versions
Fixed in: no fixed release known
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy director || rpm -q director || director --version
No fixed or unaffected release known
Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.
adobe dreamweaver DOWNGRADE
Affected: 9.0
Fixed in: no fixed release known
Safe to downgrade to: a release before 9.0
1. Check installed version
apt-cache policy dreamweaver || rpm -q dreamweaver || dreamweaver --version
2. No fixed release: DOWNGRADE to a release before 9.0 (Debian / Ubuntu)
apt-cache madison dreamweaver sudo apt install dreamweaver=<VERSION_BEFORE_9.0> sudo apt-mark hold dreamweaver
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list dreamweaver sudo dnf downgrade dreamweaver-<VERSION_BEFORE_9.0> sudo dnf versionlock add dreamweaver
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
adobe elicensing MITIGATE
Affected: all versions
Fixed in: no fixed release known
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy elicensing || rpm -q elicensing || elicensing --version
No fixed or unaffected release known
Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.
adobe fireworks DOWNGRADE
Affected: 9.0
Fixed in: no fixed release known
Safe to downgrade to: a release before 9.0
1. Check installed version
apt-cache policy fireworks || rpm -q fireworks || fireworks --version
2. No fixed release: DOWNGRADE to a release before 9.0 (Debian / Ubuntu)
apt-cache madison fireworks sudo apt install fireworks=<VERSION_BEFORE_9.0> sudo apt-mark hold fireworks
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list fireworks sudo dnf downgrade fireworks-<VERSION_BEFORE_9.0> sudo dnf versionlock add fireworks
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2005-4708?

captivate: mitigate or apply the listed mitigation; contribute: downgrade or apply the listed mitigation; director: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2005-4708 being exploited?

CVE-2005-4708 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2005-4708 affect?

CVE-2005-4708 affects captivate, contribute, director. Severity is high (CVSS 7.2). Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service with the Users group permitted to configure the service, including the path to executable, which allows

How urgent is CVE-2005-4708?

Priority 42/100. High severity

Related CVEs

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.