[Scribus] Warning: Buffer overflow vulnerability in Adobe Reader
Fri Jul 8 00:01:05 CEST 2005
Security Advisory: Buffer overflow vulnerability in Adobe Reader (Linux,
Solaris, HP-UX, IBM-AIX)
Advisory Name: Buffer overflow vulnerability in Adobe Reader
Release Date: July 05, 2005
Product: Adobe Reader 5.0.9, 5.0.10
Platform: Linux, Solaris, HP-UX, IBM-AIX
Vulnerability Identifier: CAN-2005-1625
Overview: A vulnerability within Adobe Reader has been identified. Under
certain circumstances, remote exploitation of a buffer overflow in Adobe
Reader could allow an attacker to execute arbitrary code.
Adobe has solutions available that can rectify these issues. Please refer to
the "Recommendations" section for further information.
Effect: If exploited, it could allow the execution of arbitrary code under the
privileges of the local user. Remote exploitation is possible if the
malicious PDF document is sent as an email attachment or if the PDF document
is accessed via a web link.
Details: The vulnerability is within the Adobe Reader control. Under special
circumstances, if a malicious PDF file is opened using Adobe Reader, a stack
buffer overflow could occur resulting in the execution of arbitrary code.
More in http://www.adobe.com/support/techdocs/329083.html
America/Brazil GMT -3
Ubuntu Linux 5.04
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 189 bytes
Desc: not available
Url : http://nashi.altmuehlnet.de/pipermail/scribus/attachments/20050707/b4f4cf31/attachment.pgp
More information about the scribus