Vulnerability in Adobe Acrobat
CVE-2002-0030
The digital signature mechanism for the Adobe Acrobat PDF viewer only verifies the PE header of executable code for a plug-in, which can allow attackers to execute arbitrary code in certified mode by making the plug-in appear to be signed by Adobe.
EPSS: 0.009 (56.1th percentile) — read the EPSS interpretation.
Affected products
- Adobe Acrobat — versions 4.0, 4.0.5, 4.0.5a
- Adobe Acrobat_reader — versions 4.0, 4.0.5, 4.0.5a
- N/a — versions n/a
References
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Patch, Third Party Advisory, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_VULNWATCH)