Description
The digital signature mechanism for the Adobe Acrobat PDF viewer only verifies the PE header of executable code for a plug-in, which can allow attackers to execute arbitrary code in certified mode by making the plug-in appear to be signed by Adobe.
Affected products
- Adobe / acrobat4.0 – 4.0
- Adobe / acrobat4.0.5 – 4.0.5
- Adobe / acrobat4.0.5a – 4.0.5a
- Adobe / acrobat4.0.5c – 4.0.5c
- Adobe / acrobat5.0 – 5.0
- Adobe / acrobat5.0.5 – 5.0.5
- Adobe / Acrobat Reader4.0 – 4.0
- Adobe / Acrobat Reader4.0.5 – 4.0.5
- Adobe / Acrobat Reader4.0.5a – 4.0.5a
- Adobe / Acrobat Reader4.0.5c – 4.0.5c
- Adobe / Acrobat Reader5.0 – 5.0
- Adobe / Acrobat Reader5.0.5 – 5.0.5