Adobe Acrobat / Acrobat Reader 6.0 – ‘.ETD’ File Parser Format String-安全小百科

Adobe Acrobat / Acrobat Reader 6.0 – ‘.ETD’ File Parser Format String

漏洞ID	1054795	漏洞类型
发布时间	2004-12-14	更新时间	2004-12-14
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	Windows	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/24841

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/11934/info

Adobe Acrobat/Acrobat Reader is reported prone to a remote format string vulnerability. The vulnerability is present in the ETD file parser when processing tag values. Reports indicate that the values supplied for certain tags are used as the format string in an unspecified formatted output function. Because an attacker can control the format string and the variables passed to the formatted output function, this vulnerability may be exploited to write to arbitrary locations within the memory of the process.

<title>|%p|%p|%p|%p|%p|%p|%p|%p|%p|%p|%p|%p|%p|%p|%p|%p|</title>
<baseurl>|%p|%p|%p|%p|%p|%p|%p|%p|%p|%p|%p|%p|%p|%p|%p|%p|</baseurl>

相关推荐: dbadmin CGI program缓冲区溢出漏洞

dbadmin CGI program缓冲区溢出漏洞漏洞ID 1207276 漏洞类型缓冲区溢出发布时间 1998-10-08 更新时间 1998-10-08 CVE编号 CVE-1999-1381 CNNVD-ID CNNVD-199810-011 漏…

文章版权归作者所有，未经允许请勿转载。

THE END