PT-2005-2602 · Adobe · Reader

Published 2005-07-05 · Updated 2008-09-05 · CVE-2005-1625

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Adobe Reader versions 5.0.9 through 5.0.10 for Unix

Description A stack-based buffer overflow issue exists in the UnixAppOpenFilePerform function, allowing remote attackers to execute arbitrary code via a PDF document with a long /Filespec tag.

Recommendations For Adobe Reader versions 5.0.9 and 5.0.10, consider disabling the UnixAppOpenFilePerform function as a temporary workaround until a patch is available. Avoid opening PDF documents with long /Filespec tags in the affected Adobe Reader versions to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-1625

Affected Products

Reader

References · 5

• http://idefense.com/application/poi/display?id=279&type=vulnerabilities · Vendor Advisory
• http://novell.com/linux/security/advisories/2005_42_acroread.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-575.html · Vendor Advisory
• http://adobe.com/support/techdocs/329083.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1625 · Security Note