CVE-2004-0631: Buffer Overflow
First published: Sat Aug 14 2004(Updated: )
Buffer overflow in the uudecoding feature for Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via a long filename for the PDF file that is provided to the uudecode command.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat Reader Notification Manager | =5.0 | |
| Adobe Acrobat Reader Notification Manager | =5.0.5 | |
| Adobe Acrobat Reader Notification Manager | =5.0.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/10932
- http://security.gentoo.org/glsa/glsa-200408-14.xml
- http://www.adobe.com/support/techdocs/322914.html
- http://www.redhat.com/support/errata/RHSA-2004-432.html
- http://www.idefense.com/application/poi/display?id=125&type=vulnerabilities
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16972
Frequently Asked Questions
What is the severity of CVE-2004-0631?
CVE-2004-0631 is considered critical due to its potential for remote code execution.
How do I fix CVE-2004-0631?
To fix CVE-2004-0631, upgrade your Adobe Acrobat Reader to version 5.0.9 or later.
Which versions of Adobe Acrobat Reader are affected by CVE-2004-0631?
CVE-2004-0631 affects Adobe Acrobat Reader versions 5.0, 5.0.5, and 5.0.6.
Can CVE-2004-0631 be exploited remotely?
Yes, CVE-2004-0631 can be exploited remotely via a specially crafted PDF file.
What type of vulnerability is CVE-2004-0631?
CVE-2004-0631 is categorized as a buffer overflow vulnerability.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/adobe
- canonical/adobe acrobat reader notification manager
- version/adobe acrobat reader notification manager/5.0
- version/adobe acrobat reader notification manager/5.0.5
- version/adobe acrobat reader notification manager/5.0.6