Adobe Acrobat Reader Remote Access Validation Vulnerability

Bugtraq ID:	11386
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 12 2004 12:00AM
Updated:	Oct 12 2004 12:00AM
Credit:	Discovery of this issue is credited to Jelmer <[email protected]>.
Vulnerable:	Adobe Reader 6.0.2 Adobe Reader 6.0.1 Adobe Reader 6.0 Adobe Acrobat 6.0.2 Adobe Acrobat 6.0.1 Adobe Acrobat 6.0
Not Vulnerable:

Adobe Acrobat Reader Remote Access Validation Vulnerability

An access validation vulnerability affects Adobe Acrobat Reader. This issue is due to a design error that allows a malicious file to be embedded inside a Portable Document Format (PDF) file.

An attacker may leverage this issue to disclose files that are readable by the unsuspecting user who activates a malicious PDF file. Information disclosed in this way may facilitate further attacks against the affected computer.

Adobe Acrobat Reader Remote Access Validation Vulnerability

No exploit is required to leverage this issue.

Adobe Acrobat Reader Remote Access Validation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Adobe Acrobat Reader Remote Access Validation Vulnerability

References:

• Adobe Reader Download Page (Adobe)
  
• Adobe acrobat / Adobe Reader 6 can read local files (Jelmer )