Adobe Acrobat/Adobe Reader Arbitrary File Execution Vulnerability
BID:14076
Info
Adobe Acrobat/Adobe Reader Arbitrary File Execution Vulnerability
| Bugtraq ID: | 14076 |
| Class: | Access Validation Error |
| CVE: |
CVE-2005-1623 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 28 2005 12:00AM |
| Updated: | Jul 12 2009 04:06PM |
| Credit: | Discovery is credited to Aandi Inston. |
| Vulnerable: |
Adobe Reader 7.0.1 Adobe Reader 7.0 Adobe Acrobat 7.0.1 Adobe Acrobat 7.0 |
| Not Vulnerable: |
Adobe Reader 7.0.2 Adobe Acrobat 7.0.2 |
Discussion
Adobe Acrobat/Adobe Reader Arbitrary File Execution Vulnerability
Adobe Acrobat and Adobe Reader running on Mac OS X are affected by a vulnerability that can allow remote attackers to execute arbitrary files on a computer.
This issue arises when a PDF file containing malicious JavaScript code is handled by the applications.
Exploitation of this issue can lead to various attacks including execution of arbitrary code with the privileges of the user running Adobe Acrobat or Adobe Reader.
Adobe Acrobat and Adobe Reader running on Mac OS X are affected by a vulnerability that can allow remote attackers to execute arbitrary files on a computer.
This issue arises when a PDF file containing malicious JavaScript code is handled by the applications.
Exploitation of this issue can lead to various attacks including execution of arbitrary code with the privileges of the user running Adobe Acrobat or Adobe Reader.
Exploit / POC
Adobe Acrobat/Adobe Reader Arbitrary File Execution Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Adobe Acrobat/Adobe Reader Arbitrary File Execution Vulnerability
Solution:
Adobe has released an advisory including updates to address this issue.
Adobe Acrobat 7.0
Adobe Reader 7.0
Adobe Reader 7.0.1
Adobe Acrobat 7.0.1
Solution:
Adobe has released an advisory including updates to address this issue.
Adobe Acrobat 7.0
-
Adobe Adobe Acrobat 7.0.2
http://www.adobe.com/support/downloads/
Adobe Reader 7.0
-
Adobe Adobe Acrobat Reader 7.0.2
http://www.adobe.com/support/downloads/
Adobe Reader 7.0.1
-
Adobe Adobe Acrobat Reader 7.0.2
http://www.adobe.com/support/downloads/
Adobe Acrobat 7.0.1
-
Adobe Adobe Acrobat 7.0.2
http://www.adobe.com/support/downloads/
References
Adobe Acrobat/Adobe Reader Arbitrary File Execution Vulnerability
References:
References: