CVE-2005-1347
What it is
** UNVERIFIABLE ** NOTE: this issue describes a problem that can not be independently verified as of 20050421. Adobe Acrobat reader (AcroRd32.exe) 6.0 and earlier allows remote attackers to cause a denial of service ("Invalid-ID-Handle-Error" error) and modify memory beginning at a particular address, possibly allowing the execution of arbitrary code, via a crafted PDF file. NOTE: the vendor has stated that the reporter refused to provide sufficient details to confirm the issue. In addition, due to the lack of details in the original advisory, an independent verification is not possible. Finally, the reliability of the original reporter is unknown. This item has only been assigned a CVE identifier for tracking purposes, and to serve as a concrete example of the newly defined UNVERIFIABLE and PRERELEASE content decisions in CVE, which must be discussed by the Editorial Board. Without additional details or independent verification by reliable sources, it is highly likely that this item will be REJECTED.
At a glance
- Exploitability
- Can be exploited over the network without logging in. Limited direct impact.
- Exploit odds
- 5.2% chance of exploitation in the next 30 days (EPSS).
- Fix
- No patch or advisory is linked yet. Look at mitigations or restrict exposure.
Timeline
- PublishedDisclosed publicly on CVE.org and NVD
- Last updatedMost recent change to the record
Why it ranks here
- Exploited in the wild: no, CISA does not list it.
- Exploit odds: 5.2% in the next 30 days (EPSS).
- Severity: 2.6 LOW (CVSS).
- Fix: none linked yet, which raises it.
Details
- Published
- Last modified
- Exploit probability
- 5.2% · EPSS, next 30 days
- Record status
- Modified
Affected
- Adobe Acrobat Reader 3.0
- Adobe Acrobat Reader 5.0.10
- Adobe Acrobat Reader 6.0
Attack profile CVSS 2.0 · 2.6
- Attack vector
- Network
- Complexity
- High
- Authentication
- None
- Confidentiality
- None
- Integrity
- None
- Availability
- Partial
Raw vector
AV:N/AC:H/Au:N/C:N/I:N/A:P
Is it in your code?
Hand this to your coding agent. It searches your project for the affected products and checks versions. Nothing leaves your machine.
Read https://cve-list.com/agent/cve/CVE-2005-1347.md and follow it. Check whether this project is affected by CVE-2005-1347. Read only. Don't change anything and don't upload my code. Tell me yes, no or not sure, with the file as proof.
References
- http://securitytracker.com/id?1013774
- http://www.alphahackers.com/advisories/acrobat6.txt
- http://www.osvdb.org/15850
- http://www.securityfocus.com/bid/13265
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20216
- http://securitytracker.com/id?1013774
- http://www.alphahackers.com/advisories/acrobat6.txt
- http://www.osvdb.org/15850
- http://www.securityfocus.com/bid/13265
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20216