Description
Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the (1) src, (2) setPageMode, (3) setLayoutMode, and (4) setNamedDest methods in an AcroPDF ActiveX control, a different set of vectors than CVE-2006-6027.
References
- http://research.eeye.com/html/alerts/zeroday/20061128.html
- 21338 vdb-entry
- ADV-2006-4751 vdb-entry
- 23138 third-party-advisory
- VU#198908 third-party-advisory
- 21813 vdb-entry
- http://www.adobe.com/support/security/advisories/apsa06-02.html
- adobe-acrobat-acropdf-code-execution(30574) vdb-entry
- adobe-acropdf-activex-dos(31167) vdb-entry
- 3040 exploit
- 20061205 eEye's Zero-Day Tracker Launch mailing-list