PT-2003-1131 · Adobe · Acrobat

Published 2003-03-26 · Updated 2008-09-10 · CVE-2002-0030

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adobe Acrobat (affected versions not specified)

Description The issue concerns the digital signature mechanism in the Adobe Acrobat PDF viewer. It only verifies the PE header of executable code for a plug-in, which can be exploited by attackers to execute arbitrary code in certified mode. This can be achieved by making the plug-in appear to be signed by Adobe.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-0030

Affected Products

Acrobat

References · 5

• http://kb.cert.org/vuls/id/549913 · Patch
• http://kb.cert.org/vuls/id/JSHA-5EZQGZ · Vendor Advisory
• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0148.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0030 · Security Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2003-March/004230.html · Note