CVE-2005-0035
Summary
| CVE | CVE-2005-0035 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2005-05-02 04:00:00 UTC |
| Updated | 2025-04-03 01:03:51 UTC |
| Description | The Acrobat web control in Adobe Acrobat and Acrobat Reader 7.0 and earlier, when used with Internet Explorer, allows remote attackers to determine the existence of arbitrary files via the LoadFile ActiveX method. |
Risk And Classification
Primary CVSS: v2.0 5.1 from [email protected]
AV:N/AC:H/Au:N/C:P/I:P/A:P
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
HighAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:H/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Adobe | Acrobat Reader | 4.5 | All | All | All |
| Application | Adobe | Acrobat Reader | 5.0 | All | All | All |
| Application | Adobe | Acrobat Reader | 5.0.5 | All | All | All |
| Application | Adobe | Acrobat Reader | 5.1 | All | All | All |
| Application | Adobe | Acrobat Reader | 6.0 | All | All | All |
| Application | Adobe | Acrobat Reader | 6.0.1 | All | All | All |
| Application | Adobe | Acrobat Reader | 6.0.2 | All | All | All |
| Application | Adobe | Acrobat Reader | 6.0.3 | All | All | All |
| Application | Adobe | Acrobat Reader | 7.0 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| www.osvdb.org/15242 | af854a3a-2127-422b-91ae-364da2661108 | www.osvdb.org | |
| www.niscc.gov.uk/niscc/docs/re-20050401-00264.pdf | af854a3a-2127-422b-91ae-364da2661108 | www.niscc.gov.uk | |
| Secunia - Advisories - Adobe Reader / Adobe Acrobat Local Files Detection and Denial of Service | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Advisory for local file discovery through Internet Explorer (Adobe Reader 7.0, Acrobat 7.0 on Windows) - Support Knowledgebase | af854a3a-2127-422b-91ae-364da2661108 | www.adobe.com | |
| WebHost4Life | af854a3a-2127-422b-91ae-364da2661108 | www.hyperdose.com | |
| Adobe Acrobat Reader ActiveX Control LoadFile Information Disclosure Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.