What is CVE-2003-0284?

CVE-2003-0284 is a vulnerability in Adobe Acrobat. Published 2003-06-16.

Is CVE-2003-0284 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Adobe Acrobat

CVE-2003-0284

Adobe Acrobat 5 does not properly validate JavaScript in PDF files, which allows remote attackers to write arbitrary files into the Plug-ins folder that spread to other PDF documents, as demonstrated by the W32.Yourde virus.

EPSS: 0.021 (79.8th percentile) — read the EPSS interpretation.

Affected products

Adobe Acrobat — versions 5.0
N/a — versions n/a

Public proof-of-concept exploits

0xCyberY/CVE-T4PDF
ARPSyndicate/cvemon

References

cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Patch, Third Party Advisory, third-party-advisory)
cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2003-0284?: CVE-2003-0284 is a vulnerability in Adobe Acrobat. Published 2003-06-16.
Is CVE-2003-0284 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.