Lucene search

K
freebsdFreeBSD28E93883-539F-11D9-A9E7-0001020EED82
HistoryOct 14, 2004 - 12:00 a.m.

acroread5 -- mailListIsPdf() buffer overflow vulnerability

2004-10-1400:00:00
vuxml.freebsd.org
19

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.106 Low

EPSS

Percentile

95.1%

An iDEFENSE Security Advisory reports:

Remote exploitation of a buffer overflow in version 5.09
of Adobe Acrobat Reader for Unix could allow for execution
of arbitrary code.
The vulnerability specifically exists in a the function
mailListIsPdf(). This function checks if the input file
is an email message containing a PDF. It unsafely copies
user supplied data using strcat into a fixed sized
buffer.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchacroread< 5.10UNKNOWN
FreeBSDanynoarchacroread4< 5.10UNKNOWN
FreeBSDanynoarchacroread5< 5.10UNKNOWN

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.106 Low

EPSS

Percentile

95.1%

Related for 28E93883-539F-11D9-A9E7-0001020EED82