Adobe Acrobat Reader LoadFile information disclosure ...

Date Discovered: 2005. április 1.
Date Published: 2005. április 4.
Last Updated: 2005. április 4.

The information below provides details about this vulnerability.

Vulnerability Description

Vulnerability ID: 32697
Discovered By: NISCC
Exploitable Locally: No Exploitable
Remotely: Yes
Impact: Attackers can gain sensitive information.
Root Cause: Software Vulnerability

Adobe Acrobat Reader contains a vulnerability that can allow an attacker to determine if files exist. The vulnerability is due to the Acrobat Reader control LoadFile directive giving away information when there is an attempt to open a local file. An attacker can use the Acrobat Reader control in a webpage to perform file existence checks.

Recommendations

32697 - Acrobat Reader
Upgrade to 7.0.1 or later.

http://www.adobe.com/

Affected Technologies

Adobe Systems Incorporated: Acrobat Reader 4.0
Adobe Systems Incorporated: Acrobat Reader 4.05
Adobe Systems Incorporated: Acrobat Reader 5.0.5
Adobe Systems Incorporated: Acrobat Reader 5.0.6
Adobe Systems Incorporated: Acrobat Reader 5.0.7
Adobe Systems Incorporated: Acrobat Reader 5.0.8
Adobe Systems Incorporated: Acrobat Reader 5.0.9
Adobe Systems Incorporated: Acrobat Reader 5.1
Adobe Systems Incorporated: Acrobat Reader 6.0.0
Adobe Systems Incorporated: Acrobat Reader 6.0.2
Adobe Systems Incorporated: Acrobat Reader 6.01
Adobe Systems Incorporated: Acrobat Reader 7.0

References

Mitre CVE: CAN-2005-0035