PT-2004-2506 · Adobe · Acrobat Reader+1

Published 2004-10-12 · Updated 2017-07-11 · CVE-2004-1598

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Acrobat Reader version 6.0

Description The issue allows remote attackers to read arbitrary files via a PDF file that contains an embedded Shockwave (swf) file. This swf file can reference files outside of the temporary directory, leading to unauthorized access.

Recommendations For Adobe Acrobat and Acrobat Reader version 6.0, update to a newer version to mitigate the risk.

Fix

Related Identifiers

CVE-2004-1598

Affected Products

Acrobat Reader

Acrobat

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2004-1598 · Security Note
• http://securityfocus.com/bid/11386 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=109779541602447&w=2 · Note
• http://marc.info/?l=bugtraq&m=109812210520520&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17694 · Note
• http://marc.info/?l=bugtraq&m=109771686326956&w=2 · Note