Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2003-0508 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Adobe Acrobat Reader

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
24.3%
top 3.88%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Adobe Acrobat Reader
Timeline
PublishedAug 7
Latest updateApr 29

Description

Buffer overflow in the WWWLaunchNetscape function of Adobe Acrobat Reader (acroread) 5.0.7 and earlier allows remote attackers to execute arbitrary code via a .pdf file with a long mailto link.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

🔴Vulnerability Details

1
GHSA
GHSA-r64f-mr8h-8c3p: Buffer overflow in the WWWLaunchNetscape function of Adobe Acrobat Reader (acroread) 5↗2022-04-29
▶

💥Exploits & PoCs

1
Exploit-DB
Adobe Unix Acrobat Reader 4.0/5.0 - WWWLaunchNetscape Buffer Overflow↗2003-07-01
▶
CVE-2003-0508 — Adobe Acrobat Reader vulnerability | cvebase