CVE-2003-0284

Adobe Acrobat 5 does not properly validate JavaScript in PDF files, which allows remote attackers to write arbitrary files into the Plug-ins folder that spread to other PDF documents, as demonstrated by the W32.Yourde virus.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2003-06-16

Last modified

2024-08-08

Affected products

• Acrobat (Adobe)

References

• http://www.adobe.com/support/downloads/detail.jsp?ftpID=2121
• http://www.kb.cert.org/vuls/id/184820