Adobe Acrobat and Adobe Reader Buffer Overflow in Core Plug-in Lets Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1014712
|
|
SecurityTracker URL: http://securitytracker.com/id?1014712
|
|
CVE Reference: CVE-2005-2470
(Links to External Site)
|
Date: Aug 16 2005
|
Impact: Execution of arbitrary code via network, User access via network
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Advisory: Adobe Advisory
|
Version(s): Adobe Reader 5.1, 6.0-6.0.3, 7.0-7.0.2, Adobe Acrobat 5.0-5.0.5, 6.0-6.0.3, 7.0-7.0.2
|
Description: A buffer overflow vulnerability was reported in Adobe Acrobat and Adobe Reader. A remote user can cause arbitrary code to be executed on the target user's system.
A core application plug-in that is part of Adobe Acrobat and Adobe Reader contains a buffer overflow. A remote user can create a
specially crafted file that, when opened by the target user, will trigger the overflow and cause the application to crash or potentially
execute arbitrary code.
The vendor discovered this vulnerability.
|
Impact: A remote user can cause arbitrary code to be executed on the target user's system with the privileges of the target user.
|
Solution: The vendor has issued fixed versions (7.0.3, 6.0.4, 5.0.10), available via the automatic upgrade feature or at:
http://www.adobe.com/support/downloads
For Adobe Reader on Linux or Solaris, upgrade to 7.0.1.
|
Vendor URL: www.adobe.com/support/techdocs/321644.html (Links to External Site)
|
Cause: Boundary error
|
Underlying OS: Linux (Any), UNIX (OS X), UNIX (Solaris - SunOS), Windows (Any)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Tue, 16 Aug 2005 13:18:32 -0400
Subject: http://www.adobe.com/support/techdocs/321644.html
|
> Security Advisory: Acrobat and Adobe Reader plug-in buffer overflow
> CVE-2005-2470
|
|
