CVE-2008-0667

The DOC.print function in the Adobe JavaScript API, as used by Adobe Acrobat and Reader before 8.1.2, allows remote attackers to configure silent non-interactive printing, and trigger the printing of an arbitrary number of copies of a document. NOTE: this issue might be subsumed by CVE-2008-0655...

Adobe Reader/Acrobat Remote PDF Print Silently Vulnerability

Adobe Reader/Acrobat Remote PDF Print Silently Vulnerability by [email protected] http://ruder.cdut.net Summary: A design error vulnerability exists in Adobe Reader and Adobe Acrobat Professional. A remote attacker who successfully exploit this vulnerability can control the printer...

iDefense Security Advisory 02.08.08: Adobe Reader and Acrobat Multiple Stack-based Buffer Overflow Vulnerabilities

iDefense Security Advisory 02.08.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 08, 2008 I. BACKGROUND Adobe Reader is a program for viewing Portable Document Format PDF documents. Acrobat is the program used to create such documents. More information is available at the following...

iDefense Security Advisory 02.08.08: Adobe Reader Security Provider Unsafe Libary Path Vulnerability

iDefense Security Advisory 02.08.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 08, 2008 I. BACKGROUND Adobe Reader is a program for viewing Portable Document Format PDF documents. More information is available at the following URLs. http://www.adobe.com/products/reader/ II...

VulnCheck KEV: CVE-2008-0655

Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times...

CVE-2008-0655

Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors...

CVE-2008-0655

Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors...

Code injection

Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors...

CVE-2008-0655

Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors...

CVE-2008-0655

Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors...

PT-2008-2278

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions prior to 8.1.2 Description The issue concerns multiple unspecified vulnerabilities in Adobe Reader and Acrobat. The impact and attack vectors of these vulnerabilities are unknown. Recommendations For versions...

Adobe Acrobat and Reader Multiple Arbitrary Code Execution and Security Vulnerabilities

Description Adobe Acrobat and Reader are prone to multiple arbitrary remote code-execution and security vulnerabilities. Attackers can exploit these issues to execute arbitrary code in the context of the user running the affected application. Other attacks are also possible. Versions prior to Ado...

Adobe Reader < 7.1.0 / 8.1.2 Multiple Vulnerabilities

The version of Adobe Reader installed on the remote host is earlier than 8.1.2 or 7.1.0. Such versions are reportedly affected by multiple vulnerabilities : - A design error vulnerability may allow an attacker to gain control of a user's printer. - Multiple stack-based buffer overflows may allow ...

Adobe Reader < 8.1.1 Crafted PDF File Arbitrary Code Execution

The installation of Adobe Reader on the remote host allows execution of arbitrary code by means of a specially crafted PDF file with a malicious 'mailto:' link. Note that the issue only exists on systems running Windows XP or Windows 2003 with Internet Explorer 7.0. C Tenable Network Security, In...

Adobe pdf reader URI use analysis-vulnerability warning-the black bar safety net

poc someone has already published. Use in a manner substantially homogenous tftp,tftp use up the limited system,the firewall of the factors. So simple to talk about another use-bundled exe is generated and executed. First, this vulnerability can execute arbitrary commands. I haven't tried directl...

Design/Logic Flaw

The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows remote attackers to execute arbitrary programs via invalid "%" sequences in a mailto: or other URI handler, as demonstrated using mIRC, Outlook, Firefox, Adobe...

CVE-2007-3896

CVE-2007-3896 affects Windows Shell32 (Windows XP/Server 2003 with IE7) where URL handling in the shell misparses invalid % sequences in mailto: or other URI handlers, allowing remote code execution. The issue can be triggered by launching external programs via URI handlers invoked by application...

CVE-2007-3896

The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows remote attackers to execute arbitrary programs via invalid "%" sequences in a mailto: or other URI handler, as demonstrated using mIRC, Outlook, Firefox, Adobe...

CVE-2007-5020

CVE-2007-5020 describes a remote code execution vulnerability in Adobe Acrobat/Reader 8.1 on Windows, triggered by opening a crafted PDF file related to the mailto: option and Internet Explorer 7 on Windows XP. Public details consistently reference a vulnerability in URI handling that allows arbi...

Design/Logic Flaw

AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of service unspecified resource consumption via a .pdf URL with an anchor identifier that begins with search= followed by many %n sequences, a different vulnerability...