[sec-labs] Adobe Acrobat Reader <=5.0.7 Buffer Overflow Vulnerability + PoC code

sec-labs team proudly presents: Buffer overflow vulnerability in Adobe Acrobat Reader 5.0.7 and earlier by mcbethh 29/06/2003 I. BACKGROUND quote from documentation: 'The Acrobat Reader allows anyone to view, navigate, and print documents in the Adobe Portable Document Format PDF.' However there ...

Adobe Acrobat Reader buffer overflow

Buffer overflow on oversized URL clicking...

Adobe Unix Acrobat Reader 4.05.0 - WWWLaunchNetscape Buffer Overflow

Adobe Unix Acrobat Reader 4.05.0 - WWWLaunchNetscape Buffer Overflow source: https://www.securityfocus.com/bid/8069/info An individual has reported that Adobe Acrobat Reader for Unix systems is vulnerable to a buffer overflow condition. The error is allegedly related to the processing of...

Adobe Unix Acrobat Reader 4.0/5.0 - WWWLaunchNetscape Buffer Overflow

source: https://www.securityfocus.com/bid/8069/info An individual has reported that Adobe Acrobat Reader for Unix systems is vulnerable to a buffer overflow condition. The error is allegedly related to the processing of hyperlinks, in the function "WWWLaunchNetscape". The flaw is triggered only...

CVE-2003-0434

Various PDF viewers including 1 Adobe Acrobat 5.06 and 2 Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink...

CVE-2003-0284

Adobe Acrobat 5 does not properly validate JavaScript in PDF files, which allows remote attackers to write arbitrary files into the Plug-ins folder that spread to other PDF documents, as demonstrated by the W32.Yourde virus...

CVE-2003-0284

Adobe Acrobat 5 does not properly validate JavaScript in PDF files, which allows remote attackers to write arbitrary files into the Plug-ins folder that spread to other PDF documents, as demonstrated by the W32.Yourde virus...

Adobe Acrobat does not adequately validate Acrobat JavaScript

Overview Adobe Acrobat contains a vulnerability in its JavaScript parsing engine that could allow an attacker to place arbitrary files on the local file system. Description Different versions of Adobe Acrobat software can create, modify, and read Portable Document Format PDF files. Acrobat...

CVE-2002-0030

The digital signature mechanism for the Adobe Acrobat PDF viewer only verifies the PE header of executable code for a plug-in, which can allow attackers to execute arbitrary code in certified mode by making the plug-in appear to be signed by Adobe...

CVE-2002-0030

The digital signature mechanism for the Adobe Acrobat PDF viewer only verifies the PE header of executable code for a plug-in, which can allow attackers to execute arbitrary code in certified mode by making the plug-in appear to be signed by Adobe...

CVE-2002-0030

CVE-2002-0030 is a vulnerability in Adobe Acrobat/Reader plug-ins where the digital signature check only validates the plug-in’s PE header, allowing a malicious unsigned plug-in to be loaded as if signed. This enables local attackers to cause arbitrary code execution when Acrobat/Reader loads a c...

Vulnerability (critical): Digital signature for Adobe Acrobat/Reader plug-in can be forged

-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 Vulnerability critical: Digital signature for Adobe Acrobat/Reader plug-in can be forged March 24, 2003 SUMMARY =============================================================================== Adobe Acrobat Reader supports plug-ins, i.e. additional...

Adobe Acrobat Reader plugin trojaning

Because of weak cryptography it's possible to spoof Adobe signature for Acrobat Reader plugins...

Adobe Acrobat PDF viewers contain flaw when loading and verifying plug-ins

Overview Acrobat plug-ins can be digitally signed to determine whether they should be loaded by Adobe Acrobat Reader at startup. This digital signature mechanism is not cryptographically strong and allows other potentially-malicious plug-in code to pretend to be certified by Adobe and be executed...

CVE-2002-1764

acroread in Adobe Acrobat Reader 4.05 on Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files...

Adobe Acrobat eBook Reader allows users to circumvent copying and printing restrictions

Overview A vulnerability in Adobe Acrobat eBook Reader allows local users to circumvent redistribution restrictions placed on an eBook by the publisher. Description The Adobe Acrobat eBook Reader allows one to read electronic books. The eBook Reader employs technology in order to control what the...

Vulnerability found: Adobe Acrobat eBook Reader and Content Server

-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 Product Vulnerability Reporting Form CONTACT INFORMATION =============================================================================== Name : Vladimir Katalov E-mail : [email protected] Phone / fax : +7 095 216-7937 +1 866 448-2703 fax; US, toll-fre...

Synblic links in Adobe Acrobat Reader

No description provided...

CVE-2001-1069

libCoolType library as used in Adobe Acrobat acroread on Linux creates the AdobeFnt.lst file with world-writable permissions, which allows local users to modify the file and possibly modify acroread's behavior...

Adobe Acrobat creates world writable ~/AdobeFnt.lst files

Adobe Acrobat creates world writable /AdobeFnt.lst files This problem is present in at least the Linux version: ftp://ftp.adobe.com/pub/adobe/acrobatreader/unix/4.x/linux-ar-405.tar.gz Even with umask as restrictive as 077, the Adobe binary explicitly creates and changes the AdobeFnt.lst file in...