PT-2004-1721 · Adobe · Acrobat+1

Publicado 2004-08-18 · Atualizado 2017-07-11 · CVE-2004-0629

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adobe Acrobat version 5.0.5 Adobe Acrobat Reader (affected versions not specified)

Description A buffer overflow issue exists in the ActiveX component for Adobe Acrobat and Acrobat Reader. This issue allows remote attackers to execute arbitrary code via a URI for a PDF file that contains a null terminator (%00) followed by a long string.

Recommendations For Adobe Acrobat version 5.0.5, update to a version that addresses this issue. For Adobe Acrobat Reader, apply the necessary patch or update once available. As a temporary workaround, consider disabling the pdf.ocx ActiveX component until a patch is available.

Correção

Identificadores relacionados

CVE-2004-0629

Produtos afetados

Acrobat

Acrobat Reader

Referências · 6

• http://idefense.com/application/poi/display?id=126&type=vulnerabilities · Nota
• http://adobe.com/support/techdocs/330527.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16998 · Nota
• http://gentoo.org/security/en/glsa/glsa-200408-14.xml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-0629 · Nota de Segurança
• http://securityfocus.com/bid/10947 · Aviso do Fabricante