CVE-2004-0632 Information

Description

Adobe Reader 6.0 does not properly handle null characters when splitting a filename path into components which allows remote attackers to execute arbitrary code via a file with a long extension that is not normally handled by Reader triggering a buffer overflow.

Reference

http://www.adobe.com/support/techdocs/330527.html http://www.adobe.com/support/techdocs/34222.htm http://www.idefense.com/application/poi/display?id=116&type=vulnerabilities https://exchange.xforce.ibmcloud.com/vulnerabilities/16667

Share on: