CVE-2004-0632

Adobe Reader 6.0 does not properly handle null characters when splitting a filename path into components, which allows remote attackers to execute arbitrary code via a file with a long extension that is not normally handled by Reader, triggering a buffer overflow.

🔗 References (8)

• cve@mitrehttp://www.adobe.com/support/techdocs/330527.html
• cve@mitrehttp://www.adobe.com/support/techdocs/34222.htm
• cve@mitrehttp://www.idefense.com/application/poi/display?id=116&type=vulnerabilities
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/16667
• af854a3a-2127-422b-91ae-364da2661108http://www.adobe.com/support/techdocs/330527.html
• af854a3a-2127-422b-91ae-364da2661108http://www.adobe.com/support/techdocs/34222.htm
• af854a3a-2127-422b-91ae-364da2661108http://www.idefense.com/application/poi/display?id=116&type=vulnerabilities
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/16667