CVE-2004-0632
adobe: no CVSS score yet. EPSS 7.2% chance of exploitation in the next 30 days.
Adobe Reader 6.0 does not properly handle null characters when splitting a filename path into components, which allows remote attackers to execute arbitrary code via a file with a long extension that is not normally handled by Reader, triggering a buffer overflow.
- EPSS
- 7.2% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- adobe:acrobat
- adobe:acrobat_reader