| Package | Affected versions | Patched versions |
|---|---|---|
| acrobat | = 4.0= 4.0.5= 4.0.5a= 4.0.5c= 5.0= 5.0.5 | |
| acrobat reader | = 4.0= 4.0.5= 4.0.5a= 4.0.5c= 5.0= 5.0.5 |
The digital signature mechanism for the Adobe Acrobat PDF viewer only verifies the PE header of executable code for a plug-in, which can allow attackers to execute arbitrary code in certified mode by making the plug-in appear to be signed by Adobe.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free