CVE-2005-1841: Low severity Adobe Acrobat reader vulnerability

Published Jul 7, 2005

Updated

The control for Adobe Reader 5.0.9 and 5.0.10 on Linux, Solaris, HP-UX, and AIX creates temporary files with the permissions as specified in a user's umask, which could allow local users to read PDF documents of that user if the umask allows it.

Affected Software

2 affected components

Adobe Acrobat reader=5.0.9

Adobe Acrobat reader=5.0.10

Remediation

Patch Available

http://www.adobe.com/support/techdocs/329121.html

Event History

Jul 7, 2005

CVE Published

04:00 AM

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-1841?

CVE-2005-1841 is considered a medium severity vulnerability that could allow local users to gain access to a user's PDF documents.

How do I fix CVE-2005-1841?

To fix CVE-2005-1841, users should upgrade to a secure version of Adobe Reader or adjust their umask to prevent unauthorized access to temporary files.

What software versions are affected by CVE-2005-1841?

CVE-2005-1841 affects Adobe Reader versions 5.0.9 and 5.0.10 on Linux, Solaris, HP-UX, and AIX.

What type of vulnerability is CVE-2005-1841?

CVE-2005-1841 is a local file permission vulnerability that exposes sensitive documents due to improper handling of temporary files.

Can CVE-2005-1841 be exploited remotely?

No, CVE-2005-1841 requires local access to the affected system to exploit the vulnerability.