Adobe Acrobat Reader (acroread) 6, under certain circumstances when running with the "Certified plug-ins only" option disabled, loads plug-ins with signatures used for older versions of Acrobat, which can allow attackers to cause Acrobat to enter Certified mode and run untrusted plugins by modifying the CTIsCertifiedMode function.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/archive/1/328224 | Vendor Advisory |
| http://www.kb.cert.org/vuls/id/689835 | US Government Resource |
Configurations
Information
Published : 2003-08-17 21:00
Updated : 2008-09-05 13:33
NVD link : CVE-2003-0142
Mitre link : CVE-2003-0142
JSON object : View
CWE
Products Affected
adobe
- acrobat_reader


