CVE-2004-0631

Buffer overflow in the uudecoding feature for Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before…

published August 14, 2004

CVSS
—
EPSS
10%
Percentile
95.5
In the wild
Unconfirmed
What it is

⚠️ A sneaky buffer overflow lurks in Adobe Acrobat Reader! When a long filename meets the uudecoding feature, it can lead to unexpected code execution—like a surprise ingredient ruining a carefully crafted dish. 🔥 Think of it like a restaurant that accepts any order—no matter how outrageous—without checking if they can actually fulfill it. That’s how the uudecode command handles long filenames, potentially serving up a malicious dish that the kitchen was never meant to prepare! An attacker could provide a crafted PDF file with an overly long filename that exploits this buffer overflow, potentially allowing them to execute arbitrary code on the victim’s machine. This could mean anything from snooping on sensitive data to taking full control of the system, making it a serious threat you’d want to address!

Put simply

Think of it like a restaurant that accepts any order—no matter how outrageous—without checking if they can actually fulfill it. That’s how the uudecode command handles long filenames, potentially serving up a malicious dish that the kitchen was never meant to prepare! This vulnerability in Adobe Acrobat Reader versions 5.0.5, 5.0.6, and possibly earlier allows remote attackers to exploit a buffer overflow in the uudecoding feature by supplying a specially-crafted PDF file with a long filename.

What to do

An attacker could provide a crafted PDF file with an overly long filename that exploits this buffer overflow, potentially allowing them to execute arbitrary code on the victim’s machine. This could mean anything from snooping on sensitive data to taking full control of the system, making it a serious threat you’d want to address! To protect yourself, consider upgrading to a patched version of Adobe Acrobat Reader that addresses this vulnerability. Alternatively, avoid using the uudecoding feature if possible and implement strict filename length checks in your PDF handling processes. 🛡️ You've got this! With these steps, you'll be well on your way to securing your systems against this sneaky overflow! ✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09822 · 95.5th percentile
Published
2004-08-14T04:00Z
EPSS history
Timeline
  • 14 AUG 04:00Z
    Buffer overflow in the uudecoding feature for Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before…
    cvelistv5