PT-2005-1159 · Microsoft+1 · Internet Explorer+2

Publicado 2005-04-21 · Atualizado 2011-03-08 · CVE-2005-0035

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Acrobat Reader versions 7.0 and earlier

Description The issue allows remote attackers to determine the existence of arbitrary files when the Acrobat web control is used with Internet Explorer. This is possible via the LoadFile ActiveX method.

Recommendations For Adobe Acrobat and Acrobat Reader versions 7.0 and earlier, consider disabling the LoadFile ActiveX method as a temporary workaround until a patch is available. Restrict access to the Acrobat web control to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-0035

Produtos afetados

Acrobat Reader

Acrobat

Internet Explorer

Referências · 8

• http://adobe.com/support/techdocs/331465.html · Nota
• http://osvdb.org/15242 · Nota
• http://hyperdose.com/advisories/H2005-06.txt · Nota
• http://vupen.com/english/advisories/2005/0310 · Nota
• http://niscc.gov.uk/niscc/docs/re-20050401-00264.pdf · Nota
• http://securityfocus.com/bid/12989 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0035 · Nota de Segurança
• http://secunia.com/advisories/14813 · Nota