The Acrobat web control in Adobe Acrobat and Acrobat Reader 7.0 and earlier, when used with Internet Explorer, allows remote attackers to determine the existence of arbitrary files via the LoadFile ActiveX method.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Acrobat_reader | Adobe | 4.5 (including) | 4.5 (including) |
| Acrobat_reader | Adobe | 5.0 (including) | 5.0 (including) |
| Acrobat_reader | Adobe | 5.0.5 (including) | 5.0.5 (including) |
| Acrobat_reader | Adobe | 5.1 (including) | 5.1 (including) |
| Acrobat_reader | Adobe | 6.0 (including) | 6.0 (including) |
| Acrobat_reader | Adobe | 6.0.1 (including) | 6.0.1 (including) |
| Acrobat_reader | Adobe | 6.0.2 (including) | 6.0.2 (including) |
| Acrobat_reader | Adobe | 6.0.3 (including) | 6.0.3 (including) |
| Acrobat_reader | Adobe | 7.0 (including) | 7.0 (including) |
References
- http://secunia.com/advisories/14813
- http://www.adobe.com/support/techdocs/331465.html
- http://www.hyperdose.com/advisories/H2005-06.txt
- http://www.niscc.gov.uk/niscc/docs/re-20050401-00264.pdf
- http://www.osvdb.org/15242
- http://www.securityfocus.com/bid/12989
- http://www.vupen.com/english/advisories/2005/0310
- http://secunia.com/advisories/14813
- http://www.adobe.com/support/techdocs/331465.html
- http://www.hyperdose.com/advisories/H2005-06.txt
- http://www.niscc.gov.uk/niscc/docs/re-20050401-00264.pdf
- http://www.osvdb.org/15242
- http://www.securityfocus.com/bid/12989
- http://www.vupen.com/english/advisories/2005/0310