PT-2005-2349 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat reader versions 6.0 and earlier Description: The issue allows remote attackers to cause a denial of service and modify memory, possibly allowing the execution of arbitrary code, via a crafted PDF file. The vendor was unable to...

Adobe Acrobat Reader ActiveX information leak

It's possible to check file existance with LoadFile method...

CVE-2005-0035

The CVE-2005-0035 entry concerns the Acrobat/Acrobat Reader ActiveX web control used with Internet Explorer (versions 7.0 and earlier). The vulnerability allows a remote attacker to determine the existence of local files via the LoadFile method, effectively an information-disclosure weakness in t...

CVE-1999-1576

Buffer overflow in Adobe Acrobat ActiveX control pdf.ocx, PDF.PdfCtrl.1 1.3.188 for Acrobat Reader 4.0 allows remote attackers to execute arbitrary code via the pdf.setview method...

CVE-2005-0492

Adobe Acrobat Reader 6.0.3 and 7.0.0 allows remote attackers to cause a denial of service application crash via a PDF file that contains a negative Count value in the root page node...

CVE-2005-0492

Adobe Acrobat Reader 6.0.3 and 7.0.0 are affected by CVE-2005-0492. A malformed PDF with a negative Count value in the root page node can cause an application crash (DoS). The issue is described in the NVD entry and supported by OpenVAS references; no patch/versioned remediation detail is provide...

Adobe Acrobat Reader for UNIX contains a buffer overflow in mailListIsPdf()

Overview A buffer overflow in Adobe Acrobat Reader for UNIX could allow a remote attacker to execute arbitrary code. Description Adobe Acrobat Reader is an application that allows users to view PDF Portable Document Format files. Acrobat Reader for UNIX Linux, Sun Solaris SPARC, IBM AIX, or HP-UX...

CVE-2004-1152

Buffer overflow in the mailListIsPdf function in Adobe Acrobat Reader 5.09 for Unix allows remote attackers to execute arbitrary code via an e-mail message with a crafted PDF attachment...

CVE-2004-1153

Format string vulnerability in Adobe Acrobat Reader 6.0.0 through 6.0.2 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an .ETD document containing format string specifiers in 1 title or 2 baseurl fields...

Important: Red Hat Security Advisory: acroread security update

An updated Adobe Acrobat Reader package that fixes a security issue is now available. The Adobe Acrobat Reader browser allows for the viewing, distributing, and printing of documents in portable document format PDF. iDEFENSE has reported that Adobe Acrobat Reader 5.0.9 contains a buffer overflow...

RHEL 3 : acroread (RHSA-2004:674)

An updated Adobe Acrobat Reader package that fixes a security issue is now available. The Adobe Acrobat Reader browser allows for the viewing, distributing, and printing of documents in portable document format PDF. iDEFENSE has reported that Adobe Acrobat Reader 5.0.9 contains a buffer overflow...

CVE-2004-1153

Format string vulnerability in Adobe Acrobat Reader 6.0.0 through 6.0.2 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an .ETD document containing format string specifiers in 1 title or 2 baseurl fields...

CVE-2004-1153

Adobe Acrobat Reader (Windows/macOS/Linux) versions 6.0.0–6.0.2 are affected by a DoS/vulnerability in the ETD file parser caused by a format string flaw, which can crash the app and potentially enable code execution. The OpenVAS entries corroborate a DoS impact but do not provide a patch or miti...

CVE-2004-1152

Buffer overflow in the mailListIsPdf function in Adobe Acrobat Reader 5.09 for Unix allows remote attackers to execute arbitrary code via an e-mail message with a crafted PDF attachment...

CVE-2004-1152

CVE-2004-1152 : A buffer overflow in the mailListIsPdf function of Adobe Acrobat Reader 5.09 for UNIX allows remote code execution via a crafted PDF in an email attachment. The issue arises from unsafe string handling (strcat) into a fixed buffer while analyzing email messages, enabling arbitrary...

GLSA-200412-12 : Adobe Acrobat Reader: Buffer overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200412-12 Adobe Acrobat Reader: Buffer overflow vulnerability A buffer overflow has been discovered in the email processing of Adobe Acrobat Reader. This flaw exists in the mailListIsPdf function, which checks if the input file is...

Adobe Acrobat Reader: Buffer overflow vulnerability

Background Adobe Acrobat Reader is a utility used to view PDF files. Description A buffer overflow has been discovered in the email processing of Adobe Acrobat Reader. This flaw exists in the mailListIsPdf function, which checks if the input file is an email message containing a PDF file. Impact ...

iDEFENSE Security Advisory 12.14.04 - Adobe Acrobat Reader 5.0.9 mailListIsPdf() Buffer Overflow Vulnerability

Adobe Acrobat Reader 5.0.9 mailListIsPdf Buffer Overflow Vulnerability iDEFENSE Security Advisory 12.14.04 www.idefense.com/application/poi/display?id=161&type=vulnerabilities December 14, 2004 I. BACKGROUND Adobe Acrobat Reader is a program for viewing Portable Document Format PDF documents. Mor...

acroread5 -- mailListIsPdf() buffer overflow vulnerability

An iDEFENSE Security Advisory reports: Remote exploitation of a buffer overflow in version 5.09 of Adobe Acrobat Reader for Unix could allow for execution of arbitrary code. The vulnerability specifically exists in a the function mailListIsPdf. This function checks if the input file is an email...

CVE-2004-0194

CVE-2004-0194 affects Adobe Acrobat Reader 5.1. It is a stack-based buffer overflow in the OutputDebugString function triggered by a PDF containing XFDF data, enabling remote code execution. The vulnerability has a CVSS base score of 7.5 (Network, Low attack complexity, no authentication required...