PT-2002-2023 · Adobe · Ebook Reader

Publicado 2002-08-31 · Atualizado 2008-09-05 · CVE-2002-1017

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Adobe eBook Reader versions 2.1 through 2.2

Description: The issue allows a user to copy eBooks to other systems by exploiting the backup feature. This is achieved by capturing the encryption Challenge and using the appropriate hash function to generate the activation code.

Recommendations: For Adobe eBook Reader versions 2.1 through 2.2, consider restricting the use of the backup feature to minimize the risk of eBook copying. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2002-1017

Produtos afetados

Ebook Reader

Referências · 4

• http://securityfocus.com/bid/5358 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1017 · Nota de Segurança
• http://iss.net/security_center/static/9740.php · Aviso do Fabricante
• http://online.securityfocus.com/archive/1/285093 · Nota