Vulnerability Details CVE-2005-2470
Buffer overflow in a "core application plug-in" for Adobe Reader 5.1 through 7.0.2 and Acrobat 5.0 through 7.0.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.056
EPSS Ranking 90.0%
CVSS Severity
CVSS v2 Score 7.5
References
- http://secunia.com/advisories/16466
- http://securitytracker.com/id?1014712
- http://www.adobe.com/support/techdocs/321644.html
- http://www.gentoo.org/security/en/glsa/glsa-200508-11.xml
- http://www.kb.cert.org/vuls/id/896220
- http://www.novell.com/linux/security/advisories/2005_19_sr.html
- http://www.redhat.com/support/errata/RHSA-2005-750.html
- http://www.securityfocus.com/bid/14603
- http://www.vupen.com/english/advisories/2005/1434
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21860
- http://secunia.com/advisories/16466
- http://securitytracker.com/id?1014712
- http://www.adobe.com/support/techdocs/321644.html
- http://www.gentoo.org/security/en/glsa/glsa-200508-11.xml
- http://www.kb.cert.org/vuls/id/896220
- http://www.novell.com/linux/security/advisories/2005_19_sr.html
- http://www.redhat.com/support/errata/RHSA-2005-750.html
- http://www.securityfocus.com/bid/14603
- http://www.vupen.com/english/advisories/2005/1434
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21860
Products affected by CVE-2005-2470
-
cpe:2.3:a:adobe:acrobat:5.0
-
cpe:2.3:a:adobe:acrobat:5.0.5
-
cpe:2.3:a:adobe:acrobat:6.0
-
cpe:2.3:a:adobe:acrobat:6.0.1
-
cpe:2.3:a:adobe:acrobat:6.0.2
-
cpe:2.3:a:adobe:acrobat:7.0
-
cpe:2.3:a:adobe:acrobat:7.0.1
-
cpe:2.3:a:adobe:acrobat:7.0.2
-
cpe:2.3:a:adobe:acrobat_reader:5.1
-
cpe:2.3:a:adobe:acrobat_reader:6.0
-
cpe:2.3:a:adobe:acrobat_reader:6.0.1
-
cpe:2.3:a:adobe:acrobat_reader:6.0.2
-
cpe:2.3:a:adobe:acrobat_reader:6.0.3
-
cpe:2.3:a:adobe:acrobat_reader:7.0
-
cpe:2.3:a:adobe:acrobat_reader:7.0.1
-
cpe:2.3:a:adobe:acrobat_reader:7.0.2