PT-2005-2808 · Adobe · Reader

Publicado 2005-07-07 · Atualizado 2008-09-05 · CVE-2005-1841

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Adobe Reader versions 5.0.9 through 5.0.10

Description The issue allows local users to potentially read PDF documents of another user due to the control creating temporary files with permissions specified by the user's umask. This could lead to unauthorized access to sensitive information if the umask settings allow it.

Recommendations For Adobe Reader versions 5.0.9 through 5.0.10, consider adjusting the umask settings to restrict access to temporary files created by the control, or apply specific permissions to limit readability of these files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-1841

Produtos afetados

Reader

Referências · 5

• http://adobe.com/support/techdocs/329121.html · Aviso do Fabricante
• http://secunia.com/secunia_research/2005-6/advisory · Aviso do Fabricante
• http://secunia.com/advisories/14457 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-1841 · Nota de Segurança
• http://redhat.com/support/errata/RHSA-2005-575.html · Aviso do Fabricante