QwikSec

Security Database

CVE

CWE

Training

CVE-2006-6236

Published: Dec 3, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the (1) src, (2) setPageMode, (3) setLayoutMode, and (4) setNamedDest methods in an AcroPDF ActiveX control, a different set of vectors than CVE-2006-6027.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://research.eeye.com/html/alerts/zeroday/20061128.html

x_refsource_MISC

vdb-entry

x_refsource_BID

vdb-entry

x_refsource_VUPEN

third-party-advisory

x_refsource_SECUNIA

third-party-advisory

x_refsource_CERT-VN

vdb-entry

x_refsource_BID

http://www.adobe.com/support/security/advisories/apsa06-02.html

x_refsource_CONFIRM

adobe-acrobat-acropdf-code-execution(30574)

vdb-entry

x_refsource_XF

adobe-acropdf-activex-dos(31167)

vdb-entry

x_refsource_XF

exploit

x_refsource_EXPLOIT-DB

20061205 eEye's Zero-Day Tracker Launch

mailing-list

x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.