CVE-2005-2470: Buffer Overflow

Published Aug 16, 2005

Updated

Buffer overflow in a "core application plug-in" for Adobe Reader 5.1 through 7.0.2 and Acrobat 5.0 through 7.0.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.

Affected Software

16 affected components

Adobe Acrobat=5.0

Adobe Acrobat=5.0.5

Adobe Acrobat=6.0

Adobe Acrobat=6.0.1

Adobe Acrobat=6.0.2

Adobe Acrobat=7.0

Adobe Acrobat=7.0.1

Adobe Acrobat=7.0.2

Adobe Acrobat reader=5.1

Adobe Acrobat reader=6.0

Adobe Acrobat reader=6.0.1

Adobe Acrobat reader=6.0.2

Adobe Acrobat reader=6.0.3

Adobe Acrobat reader=7.0

Adobe Acrobat reader=7.0.1

Adobe Acrobat reader=7.0.2

Remediation

Patch Available

http://www.adobe.com/support/techdocs/321644.html

Event History

Aug 16, 2005

CVE Published

04:00 AM

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-2470?

CVE-2005-2470 is classified as a high severity vulnerability due to its potential to cause crashes and execute arbitrary code.

How do I fix CVE-2005-2470?

To fix CVE-2005-2470, update your Adobe Reader or Acrobat software to the latest version available from Adobe.

Which software versions are affected by CVE-2005-2470?

CVE-2005-2470 affects Adobe Reader versions 5.1 through 7.0.2 and Acrobat versions 5.0 through 7.0.2.

What are the potential impacts of CVE-2005-2470?

The potential impacts of CVE-2005-2470 include denial of service through crashes and the possibility of arbitrary code execution.

Can CVE-2005-2470 be exploited remotely?

Yes, attackers can exploit CVE-2005-2470 remotely through the manipulation of documents processed by the affected Adobe software.