PT-2004-1723 · Adobe · Acrobat Reader

Published 2004-08-14 · Updated 2017-07-11 · CVE-2004-0631

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader versions 5.0.5 through 5.0.6 Adobe Acrobat Reader versions prior to 5.0.9

Description A buffer overflow issue exists in the uudecoding feature, allowing remote attackers to execute arbitrary code via a long filename for the PDF file provided to the uudecode command.

Recommendations For Adobe Acrobat Reader versions 5.0.5 and 5.0.6, update to a version later than 5.0.9 to resolve the issue. For Adobe Acrobat Reader versions prior to 5.0.9, update to a version later than 5.0.9 to resolve the issue. As a temporary workaround, consider restricting the use of the uudecode command for PDF files until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2004-0631

Affected Products

Acrobat Reader

References · 7

• 🔥 http://securityfocus.com/bid/10932 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-0631 · Security Note
• http://security.gentoo.org/glsa/glsa-200408-14.xml · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2004-432.html · Vendor Advisory
• http://idefense.com/application/poi/display?id=125&type=vulnerabilities · Note
• http://adobe.com/support/techdocs/322914.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16972 · Note