CVE-2002-0030

Опубликовано: 02 апр. 2003

Источник: nvd

CVSS2: 4.6

EPSS Низкий

Описание

The digital signature mechanism for the Adobe Acrobat PDF viewer only verifies the PE header of executable code for a plug-in, which can allow attackers to execute arbitrary code in certified mode by making the plug-in appear to be signed by Adobe.

Ссылки

http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0148.html
Vendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2003-March/004230.html
http://www.kb.cert.org/vuls/id/549913
Patch
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/JSHA-5EZQGZ
Vendor Advisory
http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0148.html
Vendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2003-March/004230.html
http://www.kb.cert.org/vuls/id/549913
Patch
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/JSHA-5EZQGZ
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:adobe:acrobat:4.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:4.0.5a:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:4.0.5c:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:5.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:5.0.5:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat_reader:4.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat_reader:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat_reader:4.0.5a:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat_reader:4.0.5c:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat_reader:5.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat_reader:5.0.5:*:*:*:*:*:*:*

EPSS

Процентиль: 44%

0.00217

Низкий

4.6 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-62h9-42q3-6p62

github

больше 3 лет назад