CVE-2002-0030: Medium severity Adobe Acrobat vulnerability
Published Mar 26, 2003
·Updated
The digital signature mechanism for the Adobe Acrobat PDF viewer only verifies the PE header of executable code for a plug-in, which can allow attackers to execute arbitrary code in certified mode by making the plug-in appear to be signed by Adobe.
Affected Software
12 affected components
Adobe Acrobat=4.0
Adobe Acrobat=4.0.5
Adobe Acrobat=4.0.5a
Adobe Acrobat=4.0.5c
Adobe Acrobat=5.0
Adobe Acrobat=5.0.5
Adobe Acrobat reader=4.0
Adobe Acrobat reader=4.0.5
Adobe Acrobat reader=4.0.5a
Adobe Acrobat reader=4.0.5c
Adobe Acrobat reader=5.0
Adobe Acrobat reader=5.0.5
Remediation
Patch Available
Event History
Mar 26, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0030?
CVE-2002-0030 is considered to be a medium severity vulnerability.
2
How do I fix CVE-2002-0030?
To fix CVE-2002-0030, update Adobe Acrobat Reader to the latest version available.
3
What types of systems are affected by CVE-2002-0030?
CVE-2002-0030 affects various versions of Adobe Acrobat Reader including versions 4.0, 4.0.5, and 5.0.
4
What can attackers do by exploiting CVE-2002-0030?
Attackers can execute arbitrary code in certified mode by making a plug-in appear to be signed by Adobe.
5
Is CVE-2002-0030 specific to certain Adobe Acrobat Reader versions?
Yes, CVE-2002-0030 specifically affects Adobe Acrobat Reader versions 4.0, 4.0.5, and 5.0.