CVE-2004-1153 Format string vulnerability in Adobe Acrobat Reader 6.0.0 through 6.0.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an .ETD documen...
HighCVSS 10.0
EPSS 8.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in Adobe Acrobat Reader 6.0.0 through 6.0.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an .ETD document containing format string specifiers in (1) title or (2) baseurl fields.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe Acrobat Reader | = 6.0 | No fix listed |
| Adobe Acrobat Reader | = 6.0.2 | No fix listed |
| Adobe Acrobat Reader | = 8.0 | No fix listed |
References
- www.adobe.com
- 20041214 Adobe Reader 6.0 .ETD File Format String Vulnerability exploit patch third-party-advisory vendor-advisory
- adobe-acrobat-etd-format-string(18478) vdb-entry
- oval:org.mitre.oval:def:2919 signature vdb-entry