PT-2002-2023 · Adobe · Ebook Reader

Published 2002-08-31 · Updated 2008-09-05 · CVE-2002-1017

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Adobe eBook Reader versions 2.1 through 2.2

Description: The issue allows a user to copy eBooks to other systems by exploiting the backup feature. This is achieved by capturing the encryption Challenge and using the appropriate hash function to generate the activation code.

Recommendations: For Adobe eBook Reader versions 2.1 through 2.2, consider restricting the use of the backup feature to minimize the risk of eBook copying. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-1017

Affected Products

Ebook Reader

References · 4

• http://securityfocus.com/bid/5358 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1017 · Security Note
• http://iss.net/security_center/static/9740.php · Vendor Advisory
• http://online.securityfocus.com/archive/1/285093 · Note