CVE-2006-5857

Sažetak

Adobe Reader and Acrobat 7.0.8 and earlier allows user-assisted remote attackers to execute code via a crafted PDF file that triggers memory corruption and overwrites a subroutine pointer during rendering.

Reference

http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0200.html
http://lists.suse.com/archive/suse-security-announce/2007-Jan/0012.html
http://osvdb.org/31316
http://secunia.com/advisories/23666
http://secunia.com/advisories/23691
http://secunia.com/advisories/23812
http://secunia.com/advisories/23877
http://secunia.com/advisories/23882
http://secunia.com/advisories/24533
http://security.gentoo.org/glsa/glsa-200701-16.xml
http://securitytracker.com/id?1017491
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102847-1
http://www.adobe.com/support/security/bulletins/apsb07-01.html
http://www.kb.cert.org/vuls/id/698924
http://www.piotrbania.com/all/adv/adobe-acrobat-adv.txt
http://www.redhat.com/support/errata/RHSA-2007-0021.html
http://www.securityfocus.com/archive/1/456491/100/0/threaded
http://www.securityfocus.com/bid/21981
http://www.vupen.com/english/advisories/2007/0115
http://www.vupen.com/english/advisories/2007/0957
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11698
https://rhn.redhat.com/errata/RHSA-2007-0017.html

CVSS

Base:	9.3
Impact:	10.0
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
COMPLETE	COMPLETE	COMPLETE

CVSS vektor

AV:N/AC:M/Au:N/C:C/I:C/A:C

Zadnje važnije ažuriranje

17-10-2018 - 21:45

Objavljeno

31-12-2006 - 05:00