CVE-2006-6236

2006-12-0319:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

adobe

reader

acrobat

remote attack

denial of service

arbitrary code execution

vulnerability

activex control

cve-2006-6236

7.6 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.482 Medium

EPSS

Percentile

97.4%

JSON

Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the (1) src, (2) setPageMode, (3) setLayoutMode, and (4) setNamedDest methods in an AcroPDF ActiveX control, a different set of vectors than CVE-2006-6027.

CPENameOperatorVersion
adobe:acrobat_readeradobe acrobat readereq7.0.5
adobe:acrobat_readeradobe acrobat readereq7.0.6
adobe:acrobat_readeradobe acrobat readereq7.0.8
adobe:acrobat_readeradobe acrobat readereq7.0.7
adobe:acrobat_readeradobe acrobat readereq7.0.3
adobe:acrobat_readeradobe acrobat readereq7.0.1
adobe:acrobat_readeradobe acrobat readereq7.0.2
adobe:acrobat_readeradobe acrobat readereq7.0
adobe:acrobat_readeradobe acrobat readereq7.0.4

CPE	Name	Operator	Version
adobe:acrobat_reader	adobe acrobat reader	eq	7.0.5
adobe:acrobat_reader	adobe acrobat reader	eq	7.0.6
adobe:acrobat_reader	adobe acrobat reader	eq	7.0.8
adobe:acrobat_reader	adobe acrobat reader	eq	7.0.7
adobe:acrobat_reader	adobe acrobat reader	eq	7.0.3
adobe:acrobat_reader	adobe acrobat reader	eq	7.0.1
adobe:acrobat_reader	adobe acrobat reader	eq	7.0.2
adobe:acrobat_reader	adobe acrobat reader	eq	7.0
adobe:acrobat_reader	adobe acrobat reader	eq	7.0.4