CVE-2002-0030
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
02/04/2003
Last modified:
10/09/2008
Description
The digital signature mechanism for the Adobe Acrobat PDF viewer only verifies the PE header of executable code for a plug-in, which can allow attackers to execute arbitrary code in certified mode by making the plug-in appear to be signed by Adobe.
Impact
Base Score 2.0
4.60
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:adobe:acrobat:4.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:acrobat:4.0.5:*:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:acrobat:4.0.5a:*:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:acrobat:4.0.5c:*:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:acrobat:5.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:acrobat:5.0.5:*:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:acrobat_reader:4.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:acrobat_reader:4.0.5:*:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:acrobat_reader:4.0.5a:*:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:acrobat_reader:4.0.5c:*:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:acrobat_reader:5.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:acrobat_reader:5.0.5:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page