PT-2004-1721 · Adobe · Acrobat+1

Published 2004-08-18 · Updated 2017-07-11 · CVE-2004-0629

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adobe Acrobat version 5.0.5 Adobe Acrobat Reader (affected versions not specified)

Description A buffer overflow issue exists in the ActiveX component for Adobe Acrobat and Acrobat Reader. This issue allows remote attackers to execute arbitrary code via a URI for a PDF file that contains a null terminator (%00) followed by a long string.

Recommendations For Adobe Acrobat version 5.0.5, update to a version that addresses this issue. For Adobe Acrobat Reader, apply the necessary patch or update once available. As a temporary workaround, consider disabling the pdf.ocx ActiveX component until a patch is available.

Fix

Related Identifiers

CVE-2004-0629

Affected Products

Acrobat

Acrobat Reader

References · 6

• http://gentoo.org/security/en/glsa/glsa-200408-14.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0629 · Security Note
• http://securityfocus.com/bid/10947 · Vendor Advisory
• http://idefense.com/application/poi/display?id=126&type=vulnerabilities · Note
• http://adobe.com/support/techdocs/330527.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16998 · Note