First published: Tue Oct 12 2004(Updated: )
Adobe Acrobat and Acrobat Reader 6.0 allow remote attackers to read arbitrary files via a PDF file that contains an embedded Shockwave (swf) file that references files outside of the temporary directory.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Acrobat Reader | =6.0 | |
Adobe Acrobat Reader | =6.0.1 | |
Adobe Acrobat Reader | =6.0.2 | |
Adobe Acrobat Reader Notification Manager | =6.0 | |
Adobe Acrobat Reader Notification Manager | =6.0.1 | |
Adobe Acrobat Reader Notification Manager | =6.0.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-1598 is considered to have a moderate severity rating due to its potential for unauthorized file access.
To resolve CVE-2004-1598, users should update to the latest version of Adobe Acrobat or Acrobat Reader that addresses this vulnerability.
CVE-2004-1598 affects Adobe Acrobat and Acrobat Reader version 6.0 and 6.0.1, and 6.0.2.
Attackers exploiting CVE-2004-1598 can read arbitrary files on the system by crafting a malicious PDF containing an embedded Shockwave file.
While CVE-2004-1598 is an older vulnerability, it remains relevant for users running unsupported versions of Adobe Acrobat or Acrobat Reader.