CVE-2006-6027

EXPLOITED

Adobe Acrobat Reader - Denial of Service

Title source: rule

Description

Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the LoadFile method in an AcroPDF ActiveX control.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Michal Bucko · htmldoswindows

https://www.exploit-db.com/exploits/29076

View Code ZIP pw:eip

References (10)

[Exploit] http://downloads.securityfocus.com/vulnerabilities/exploits/21155-AcroPDF_DoS.html

[Third Party Advisory] http://secunia.com/advisories/23138

[Third Party Advisory, VDB Entry] http://securitytracker.com/id?1017297

[US Government Resource] http://www.kb.cert.org/vuls/id/198908

[Exploit] http://www.securityfocus.com/bid/21155

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/30574

[Various Sources] http://research.eeye.com/html/alerts/zeroday/20061128.html

[Vendor Advisory] http://www.adobe.com/support/security/advisories/apsa06-02.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/453579/100/0/threaded

[Third Party Advisory] http://www.vupen.com/english/advisories/2006/4751

Scores

EPSS 0.6478

EPSS Percentile 98.5%

Details

VulnCheck KEV 2010-05-01

Status published

Products (9)

adobe/acrobat_reader 7.0

adobe/acrobat_reader 7.0.1

adobe/acrobat_reader 7.0.2

adobe/acrobat_reader 7.0.3

adobe/acrobat_reader 7.0.4

adobe/acrobat_reader 7.0.5

adobe/acrobat_reader 7.0.6

adobe/acrobat_reader 7.0.7

adobe/acrobat_reader 7.0.8

Published Nov 21, 2006

Tracked Since Feb 18, 2026