CVE-2005-0035
First published: Mon May 02 2005(Updated: )
The Acrobat web control in Adobe Acrobat and Acrobat Reader 7.0 and earlier, when used with Internet Explorer, allows remote attackers to determine the existence of arbitrary files via the LoadFile ActiveX method.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat Reader Notification Manager | =4.5 | |
| Adobe Acrobat Reader Notification Manager | =5.0 | |
| Adobe Acrobat Reader Notification Manager | =5.0.5 | |
| Adobe Acrobat Reader Notification Manager | =5.1 | |
| Adobe Acrobat Reader Notification Manager | =6.0 | |
| Adobe Acrobat Reader Notification Manager | =6.0.1 | |
| Adobe Acrobat Reader Notification Manager | =6.0.2 | |
| Adobe Acrobat Reader Notification Manager | =6.0.3 | |
| Adobe Acrobat Reader Notification Manager | =7.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/14813
- http://www.adobe.com/support/techdocs/331465.html
- http://www.hyperdose.com/advisories/H2005-06.txt
- http://www.niscc.gov.uk/niscc/docs/re-20050401-00264.pdf
- http://www.osvdb.org/15242
- http://www.securityfocus.com/bid/12989
- http://www.vupen.com/english/advisories/2005/0310
Frequently Asked Questions
What is the severity of CVE-2005-0035?
CVE-2005-0035 is considered a moderate severity vulnerability as it allows remote attackers to determine the existence of arbitrary files.
How do I fix CVE-2005-0035?
To fix CVE-2005-0035, upgrade to a version of Adobe Acrobat Reader later than 7.0.
Which versions of Adobe Acrobat Reader are affected by CVE-2005-0035?
CVE-2005-0035 affects Adobe Acrobat Reader versions 4.5 through 7.0.
What exploit does CVE-2005-0035 leverage?
CVE-2005-0035 leverages the LoadFile ActiveX method in the Acrobat web control.
Can CVE-2005-0035 be exploited remotely?
Yes, CVE-2005-0035 can be exploited remotely due to its reliance on ActiveX controls in Internet Explorer.
- agent/type
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/adobe
- vendor/acrobat reader
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/description
- canonical/adobe acrobat reader notification manager
- version/adobe acrobat reader notification manager/4.5
- version/adobe acrobat reader notification manager/5.0
- version/adobe acrobat reader notification manager/5.0.5
- version/adobe acrobat reader notification manager/5.1
- version/adobe acrobat reader notification manager/6.0
- version/adobe acrobat reader notification manager/6.0.1
- version/adobe acrobat reader notification manager/6.0.2
- version/adobe acrobat reader notification manager/6.0.3
- version/adobe acrobat reader notification manager/7.0