The digital signature mechanism for the Adobe Acrobat PDF viewer only verifies the PE header of executable code for a plug-in, which can allow attackers to execute arbitrary code in certified mode by making the plug-in appear to be signed by Adobe.
References
| Link | Resource |
|---|---|
| http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0148.html | Vendor Advisory |
| http://lists.grok.org.uk/pipermail/full-disclosure/2003-March/004230.html | |
| http://www.kb.cert.org/vuls/id/549913 | Patch Third Party Advisory US Government Resource |
| http://www.kb.cert.org/vuls/id/JSHA-5EZQGZ | Vendor Advisory |
| http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0148.html | Vendor Advisory |
| http://lists.grok.org.uk/pipermail/full-disclosure/2003-March/004230.html | |
| http://www.kb.cert.org/vuls/id/549913 | Patch Third Party Advisory US Government Resource |
| http://www.kb.cert.org/vuls/id/JSHA-5EZQGZ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:38
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0148.html - Vendor Advisory | |
| References | () http://lists.grok.org.uk/pipermail/full-disclosure/2003-March/004230.html - | |
| References | () http://www.kb.cert.org/vuls/id/549913 - Patch, Third Party Advisory, US Government Resource | |
| References | () http://www.kb.cert.org/vuls/id/JSHA-5EZQGZ - Vendor Advisory |
Information
Published : 2003-04-02 05:00
Updated : 2024-11-20 23:38
NVD link : CVE-2002-0030
Mitre link : CVE-2002-0030
CVE.ORG link : CVE-2002-0030
JSON object : View
Products Affected
adobe
- acrobat_reader
- acrobat
CWE