PT-2003-1131 · Adobe · Acrobat

Publicado 2003-03-26 · Atualizado 2008-09-10 · CVE-2002-0030

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adobe Acrobat (affected versions not specified)

Description The issue concerns the digital signature mechanism in the Adobe Acrobat PDF viewer. It only verifies the PE header of executable code for a plug-in, which can be exploited by attackers to execute arbitrary code in certified mode. This can be achieved by making the plug-in appear to be signed by Adobe.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2002-0030

Produtos afetados

Acrobat

Referências · 5

• http://lists.grok.org.uk/pipermail/full-disclosure/2003-March/004230.html · Nota
• http://kb.cert.org/vuls/id/549913 · Correção
• http://kb.cert.org/vuls/id/JSHA-5EZQGZ · Aviso do Fabricante
• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0148.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0030 · Nota de Segurança