RHEL 3 : acroread (RHSA-2004:432)

An updated Adobe Acrobat Reader package that fixes multiple security issues is now available. The Adobe Acrobat Reader browser allows for the viewing, distributing, and printing of documents in portable document format PDF. iDEFENSE has reported that Adobe Acrobat Reader 5.0 contains a buffer...

CVE-2004-0630

The uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via shell metacharacters "" or backtick in the filename of the PDF file that is provided to the uudecode...

CVE-2004-0631

Buffer overflow in the uudecoding feature for Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via a long filename for the PDF file that is provided to the uudecode command...

[Full-Disclosure] iDEFENSE Security Advisory 08.12.04a: Adobe Acrobat Reader (Unix) Shell Metacharacter Code Execution Vulnerability

Adobe Acrobat Reader Unix Shell Metacharacter Code Execution Vulnerability iDEFENSE Security Advisory 08.12.04a www.idefense.com/application/poi/display?id=124&type=vulnerabilities August 12, 2004 I. BACKGROUND Adobe Acrobat Reader is a program for viewing Portable Document Format PDF documents...

Multiple Adobe Acrobat Reader bugs

Shell metacharacters problem, uudecode buffer overflow...

CVE-2004-0631

CVE-2004-0631 is a buffer-overflow vulnerability in Adobe Acrobat Reader 5.0.5/5.0.6 on Unix/Linux (and potentially earlier than 5.0.9) related to the uudecode filename handling. A long UUEncoded filename could allow remote code execution. Multiple advisories (Red Hat RHSA-2004:432, Gentoo GLSA-2...

CVE-2004-0631

Buffer overflow in the uudecoding feature for Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via a long filename for the PDF file that is provided to the uudecode command...

CVE-2004-0630

CVE-2004-0630 affects Adobe Acrobat Reader on Unix/Linux (orig. 5.0.5/5.0.6, possibly earlier than 5.0.9). The vulnerability lies in the uudecode filename handling, where a filename containing shell metacharacters (backtick `) can allow remote code execution via the uudecode command. Multiple ven...

CVE-2004-0630

The uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via shell metacharacters "" or backtick in the filename of the PDF file that is provided to the uudecode...

FreeBSD : acroread uudecoder input validation error (78348ea2-ec91-11d8-b913-000c41e2cdad)

An iDEFENSE security advisory reports : Remote exploitation of an input validation error in the uudecoding feature of Adobe Acrobat Reader Unix 5.0 allows an attacker to execute arbitrary code. The Unix and Linux versions of Adobe Acrobat Reader 5.0 automatically attempt to convert uuencoded...

acroread uudecoder input validation error

An iDEFENSE security advisory reports: Remote exploitation of an input validation error in the uudecoding feature of Adobe Acrobat Reader Unix 5.0 allows an attacker to execute arbitrary code. The Unix and Linux versions of Adobe Acrobat Reader 5.0 automatically attempt to convert uuencoded...

Adobe Acrobat Reader buffer overflow

Buffer overflow on filename parsing...

Adobe Acrobat Reader .xfdf buffer overflow

Buffer overflow on parsing XML Forms Data Format...

[Full-Disclosure] Adobe Acrobat Reader XML Forms Data Format Buffer Overflow

NGSSoftware Insight Security Research Advisory Name: Adobe Acrobat Reader XML Forms Data Format Buffer Overflow Systems Affected: Adobe Acrobat Reader version 5.1 Severity: High Risk Vendor URL: http://www.adobe.com/ Author: David Litchfield [email protected] Date Vendor Notified: 7th Februar...

CVE-2003-0142

Adobe Acrobat Reader acroread 6, under certain circumstances when running with the "Certified plug-ins only" option disabled, loads plug-ins with signatures used for older versions of Acrobat, which can allow attackers to cause Acrobat to enter Certified mode and run untrusted plugins by modifyin...

CVE-2003-0508

Buffer overflow in the WWWLaunchNetscape function of Adobe Acrobat Reader acroread 5.0.7 and earlier allows remote attackers to execute arbitrary code via a .pdf file with a long mailto link...

CVE-2003-0142

Adobe Acrobat Reader acroread 6, under certain circumstances when running with the "Certified plug-ins only" option disabled, loads plug-ins with signatures used for older versions of Acrobat, which can allow attackers to cause Acrobat to enter Certified mode and run untrusted plugins by modifyin...

CVE-2003-0142

Adobe Acrobat/Reader (acroread) 6 is affected by a plugin-signature bypass vulnerability when the product runs with the default settings allowing untrusted non-certified plug-ins. The issue arises from loading signatures used for older Acrobat versions and manipulating the CTIsCertifiedMode funct...

CVE-2003-0508

CVE-2003-0508 affects Adobe Acrobat Reader (acroread) up to version 5.0.7. A buffer overflow in the WWWLaunchNetscape function can be triggered by a PDF containing a long mailto link, enabling remote code execution. This is corroborated by multiple sources (NVD, SUSE, OpenVAS) describing the same...

CVE-2003-0508

Buffer overflow in the WWWLaunchNetscape function of Adobe Acrobat Reader acroread 5.0.7 and earlier allows remote attackers to execute arbitrary code via a .pdf file with a long mailto link...