Vulnerabilities > Adobe > Acrobat > 4.0.5

DATE CVE VULNERABILITY TITLE RISK
2008-02-12 CVE-2007-5666 Code Injection vulnerability in Adobe Acrobat and Acrobat Reader
Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.1 and earlier allows local users to execute arbitrary code via a malicious Security Provider library in the reader's current working directory.
local
high complexity
adobe CWE-94
6.2
2008-02-12 CVE-2007-5663 Code Injection vulnerability in Adobe Acrobat and Acrobat Reader
Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via a crafted PDF file that calls an insecure JavaScript method in the EScript.api plug-in.
network
adobe CWE-94
critical
9.3
2008-02-12 CVE-2007-5659 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Adobe Acrobat and Acrobat Reader
Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods.
network
adobe CWE-119
critical
9.3
2008-02-07 CVE-2008-0655 Arbitrary Code Execution and Security vulnerability in Adobe Acrobat and Reader
Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.
network
adobe
critical
9.3
2006-12-31 CVE-2006-5857 Resource Management Errors vulnerability in Adobe Acrobat and Acrobat Reader
Adobe Reader and Acrobat 7.0.8 and earlier allows user-assisted remote attackers to execute code via a crafted PDF file that triggers memory corruption and overwrites a subroutine pointer during rendering.
network
adobe CWE-399
critical
9.3
2006-07-12 CVE-2006-3452 Local Privilege Escalation vulnerability in Adobe Acrobat / Adobe Reader
Adobe Reader and Acrobat 6.0.4 and earlier, on Mac OSX, has insecure file and directory permissions, which allows local users to gain privileges by overwriting program files.
local
low complexity
adobe
4.6
2006-02-02 CVE-2006-0525 Permissions, Privileges, and Access Controls vulnerability in Adobe products
Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large number of .EXE and .DLL files with write-access permission for the Everyone group, which allows local users to gain privileges via Trojan horse programs.
local
low complexity
adobe CWE-264
4.6
2003-04-02 CVE-2002-0030 Unspecified vulnerability in Adobe Acrobat and Acrobat Reader
The digital signature mechanism for the Adobe Acrobat PDF viewer only verifies the PE header of executable code for a plug-in, which can allow attackers to execute arbitrary code in certified mode by making the plug-in appear to be signed by Adobe.
local
low complexity
adobe
4.6
2000-10-20 CVE-2000-0713 Buffer Overflow vulnerability in Adobe Acrobat, Acrobat Business Tools and Acrobat Reader
Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attackers to execute arbitrary commands via a long /Registry or /Ordering specifier.
network
high complexity
adobe
7.6