VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 27, 2004· Updated Jun 16, 2026

CVE-2004-0632

CVE-2004-0632

Description

Adobe Reader 6.0 does not properly handle null characters when splitting a filename path into components, which allows remote attackers to execute arbitrary code via a file with a long extension that is not normally handled by Reader, triggering a buffer overflow.

Affected products

5
  • Adobe Inc./Acrobat4 versions
    cpe:2.3:a:adobe:acrobat:6.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:adobe:acrobat:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:acrobat:6.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:acrobat_reader:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:acrobat_reader:6.0.1:*:*:*:*:*:*:*
  • Adobe Inc./Readerllm-fuzzy
    Range: =6.0

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.