CVE-2006-1785: Low severity Adobe Document Server vulnerability
Adobe Document Server for Reader Extensions 6.0 allows remote authenticated users to inject arbitrary web script via a leading (1) ftp or (2) http URI in the ReaderURL variable in the "Update Download Site" section of ads-readerext. NOTE: it is not clear whether the vendor advisory addresses this issue. In addition, since the issue requires administrative privileges to exploit, it is not clear whether this crosses security boundaries.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-1785?
CVE-2006-1785 is considered a high severity vulnerability due to its potential for arbitrary web script injection.
How do I fix CVE-2006-1785?
To fix CVE-2006-1785, ensure that you apply the latest patches provided by Adobe for Document Server 6.0.
Who is affected by CVE-2006-1785?
CVE-2006-1785 affects users of Adobe Document Server for Reader Extensions version 6.0.
What type of vulnerability is CVE-2006-1785?
CVE-2006-1785 is classified as a script injection vulnerability.
What can an attacker achieve with CVE-2006-1785?
An attacker can potentially execute malicious scripts in the context of the affected application due to CVE-2006-1785.