FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

acroread -- XML External Entity vulnerability

Affected packages
7.0.0 <= acroread7 < 7.0.1
7.0.0 <= ja-acroread < 7.0.1

Details

VuXML ID 02bc9b7c-e019-11d9-a8bd-000cf18bbe54
Discovery 2005-06-15
Entry 2005-06-18
Modified 2005-08-28

Sverre H. Huseby discovered a vulnerability in Adobe Acrobat and Adobe Reader. Under certain circumstances, using XML scripts it is possible to discover the existence of local files.

References

CVE Name CVE-2005-1306
URL http://shh.thathost.com/secadv/adobexxe/
URL http://support.adobe.co.jp/faq/faq/qadoc.sv?226360+002+3
URL http://www.adobe.com/support/techdocs/331710.html