CVE-1999-1576

Vulnerability

Buffer overflow in Adobe Acrobat ActiveX control (pdf.ocx, PDF.PdfCtrl.1) version 1.3.188 (Acrobat Reader 4.0) when handling the setview method. The control is marked safe-for-scripting, allowing exploitation via web pages. [1]

Exploitation

An attacker can host a malicious web page that invokes the vulnerable control's setview method with a crafted argument, triggering the buffer overflow. No authentication or user interaction beyond visiting the page is required. [1]

Impact

Arbitrary code execution in the context of the user running the control. The attacker can execute arbitrary commands, leading to full compromise of the system. [1]

Mitigation

Upgrade to a newer version of Adobe Acrobat. The vulnerable version is 1.3.188 and earlier. No other workarounds are mentioned in the reference. [1]