CVE-2004-0632

Adobe Reader 6.0 does not properly handle null characters when splitting a filename path into components, which allows remote attackers to execute arbitrary code via a file with a long extension that is not normally handled by Reader, triggering a buffer overflow.

Published: Jul 27, 2004
Updated: Apr 13, 2023
CVE: CVE-2004-0632
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
adobe / acrobat	6.0.1	6.0.1.x
adobe / acrobat_reader	6.0.1	6.0.1.x
adobe / acrobat	6.0	6.0.x
adobe / acrobat_reader	6.0	6.0.x

http://www.adobe.com/support/techdocs/330527.html
http://www.adobe.com/support/techdocs/34222.htm
http://www.idefense.com/application/poi/display?id=116&type=vulnerabilities
https://exchange.xforce.ibmcloud.com/vulnerabilities/16667

Vulnerability Database

CVE-2004-0632

Deep Security Visibility Without the Complexity