Lucene search

K
jvnJapan Vulnerability NotesJVN:51615542
HistoryAug 30, 2012 - 12:00 a.m.

JVN#51615542: Adobe Reader fails to properly handle signatures

2012-08-3000:00:00
Japan Vulnerability Notes
jvn.jp
23

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.093 Low

EPSS

Percentile

94.6%

Adobe Reader contains an issue where it may fail to properly verify RSA signatures.

Impact

An attacker may be able to forge an RSA signature on a PDF document.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Note that this issue was resolved in Adobe Reader 9.

Products Affected

  • Adobe Reader 8.x and earlier

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.093 Low

EPSS

Percentile

94.6%