CVE-2004-0632

Adobe Reader 6.0 does not properly handle null characters when splitting a filename path into components, which allows remote attackers to execute arbitrary code via a file with a long extension that is not normally handled by Reader, triggering a buffer overflow.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:adobe:acrobat:6.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:6.0.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader:6.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader:6.0.1:*:*:*:*:*:*:*

History

20 Nov 2024, 23:49

Type Values Removed Values Added
References () http://www.adobe.com/support/techdocs/330527.html - () http://www.adobe.com/support/techdocs/330527.html -
References () http://www.adobe.com/support/techdocs/34222.htm - () http://www.adobe.com/support/techdocs/34222.htm -
References () http://www.idefense.com/application/poi/display?id=116&type=vulnerabilities - () http://www.idefense.com/application/poi/display?id=116&type=vulnerabilities -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/16667 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/16667 -

Information

Published : 2004-07-27 04:00

Updated : 2024-11-20 23:49


NVD link : CVE-2004-0632

Mitre link : CVE-2004-0632

CVE.ORG link : CVE-2004-0632


JSON object : View

Products Affected

adobe

  • acrobat_reader
  • acrobat