CVE-2004-0629 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Adobe Acrobat
3 documents3 sources
Severity
7.5HIGHNVD
EPSS
20.8%
top 4.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 28
Latest updateApr 29
Description
Buffer overflow in the ActiveX component (pdf.ocx) for Adobe Acrobat 5.0.5 and Acrobat Reader, and possibly other versions, allows remote attackers to execute arbitrary code via a URI for a PDF file with a null terminator (%00) followed by a long string.
CVSS vector
AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4
Affected Packages2 packages
Patches
🔴Vulnerability Details
1📐Framework References
1CAPEC▶
Embedding NULL Bytes