Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2004-0629

EPSS 20.76% · P96
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2004-0629

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Buffer overflow in the ActiveX component (pdf.ocx) for Adobe Acrobat 5.0.5 and Acrobat Reader, and possibly other versions, allows remote attackers to execute arbitrary code via a URI for a PDF file with a null terminator (%00) followed by a long string.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Adobe Acrobat 'pdf.ocx'远程缓冲区溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Acrobat是查看和打印Adobe便携文档格式(PDF)文件的程序。 Adobe Acrobat的一个ActiveX组件存在缓冲区溢出,远程攻击者可以利用这个漏洞构建恶意PDF文件,诱使用户解析,可能以进程权限在系统上执行任意指令。 问题可通过如下形式的URL触发: GET /any_existing_dir/any_existing_pdf.pdf%00[long string] HTTP/1.1 超长字符串必须为一可接收URL字符。请求提交给WEB服务器会在NULL字节(%00)截断请求,否则就会由
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2004-0629

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2004-0629

登录查看更多情报信息。

Same Patch Batch · n/a · 2004-08-18 · 10 CVEs total

CVE-2003-0105ServerMask Improper弱头匿名漏洞
CVE-2003-0928SMTP Archive Clearswift MAILsweeper过滤器绕过漏洞
CVE-2003-0929SMTP Archive File Clearswift MAILsweeper过滤器绕过漏洞
CVE-2003-0930SMTP Archive File Clearswift MAILsweeper过滤器绕过漏洞
CVE-2003-0931Sygate Enforcer Discovery包远程拒绝服务漏洞
CVE-2004-0163Sygate Secure Enterprise易受回放攻击漏洞
CVE-2004-0593Sygate Enforcer未授权广播漏洞
CVE-2004-0778CVS未文档化标记信息泄露漏洞
CVE-2004-0792Rsync Sanitize_path功能模块路径避开漏洞

IV. Related Vulnerabilities

V. Comments for CVE-2004-0629

No comments yet


Leave a comment