Advisories Blog | G5 Cyber Security

iDEFENSE Security Advisory 2004-08-12.2

iDEFENSE Security Advisory 08.12.04-2: Remote exploitation of a buffer overflow in the uudecoding feature of Adobe Acrobat Reader 5.0 for Unix allows an attacker to execute arbitrary code. The Unix and Linux versions of Adobe Acrobat Reader 5.0 automatically attempt to convert uuencoded docuements back into their original format. The vulnerability specifically exists in that Acrobat Reader fails to check the length of the filename before copying it into a fixed length buffer. This allows a maliciously constructed file to cause a buffer overflow resulting in the execution of arbitrary code.

 

You can download this advisory from the following link: https://packetstormsecurity.com/files/download/34043/08.12.04-2.txt

Source: https://packetstormsecurity.com/files/34043/iDEFENSE-Security-Advisory-2004-08-12.2.html

Exit mobile version