Lucene search

K
cveMitreCVE-2004-1153
HistoryJan 10, 2005 - 5:00 a.m.

CVE-2004-1153

2005-01-1005:00:00
mitre
web.nvd.nist.gov
30
cve-2004-1153
adobe acrobat reader
format string vulnerability
denial of service
remote code execution
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.466

Percentile

97.5%

Format string vulnerability in Adobe Acrobat Reader 6.0.0 through 6.0.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an .ETD document containing format string specifiers in (1) title or (2) baseurl fields.

Affected configurations

Nvd
Node
adobeacrobat_readerMatch6.0
OR
adobeacrobat_readerMatch6.0.2
OR
adobeacrobat_readerMatch8.0
VendorProductVersionCPE
adobeacrobat_reader6.0cpe:2.3:a:adobe:acrobat_reader:6.0:*:*:*:*:*:*:*
adobeacrobat_reader6.0.2cpe:2.3:a:adobe:acrobat_reader:6.0.2:*:*:*:*:*:*:*
adobeacrobat_reader8.0cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.466

Percentile

97.5%