PT-2005-1159 · Microsoft+1 · Internet Explorer+2

Published 2005-04-21 · Updated 2011-03-08 · CVE-2005-0035

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Acrobat Reader versions 7.0 and earlier

Description The issue allows remote attackers to determine the existence of arbitrary files when the Acrobat web control is used with Internet Explorer. This is possible via the LoadFile ActiveX method.

Recommendations For Adobe Acrobat and Acrobat Reader versions 7.0 and earlier, consider disabling the LoadFile ActiveX method as a temporary workaround until a patch is available. Restrict access to the Acrobat web control to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-0035

Affected Products

Acrobat Reader

Acrobat

Internet Explorer

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2005-0035 · Security Note
• http://adobe.com/support/techdocs/331465.html · Note
• http://osvdb.org/15242 · Note
• http://hyperdose.com/advisories/H2005-06.txt · Note
• http://vupen.com/english/advisories/2005/0310 · Note
• http://niscc.gov.uk/niscc/docs/re-20050401-00264.pdf · Note
• http://securityfocus.com/bid/12989 · Note
• http://secunia.com/advisories/14813 · Note