CVE-2000-0713

HighCVSS 7.6/10Last modified Jun 16, 2026

Description

Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attackers to execute arbitrary commands via a long /Registry or /Ordering specifier.

Metrics

CVSS 2.0 7.6/10AV:N/AC:H/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-07/0382.htmlPatch, Vendor Advisory
http://www.adobe.com/misc/pdfsecurity.html
http://www.securityfocus.com/bid/1509Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-07/0382.htmlPatch, Vendor Advisory
http://www.adobe.com/misc/pdfsecurity.html
http://www.securityfocus.com/bid/1509Patch, Vendor Advisory

Timeline

Published: Oct 20, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-07147.2umb-scheme 3.2-11 for Red Hat Linux is installed with world-writeable files.CVE-2000-07152.1DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a tempo CVE-2000-07162.6WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which CVE-2000-07175.0GoodTech FTP server allows remote attackers to cause a denial of service via a large number of RNTO commands.CVE-2000-07181.2A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed.CVE-2000-07196.2VariCAD 7.0 is installed with world-writeable files, which allows local users to replace the VariCAD programs with a Trojan horse program.CVE-2000-07205.0news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attac CVE-2000-07216.2The FSserial, FlagShip_c, and FlagShip_p programs in the FlagShip package are installed world-writeable, which allows local users to replace CVE-2000-07226.2Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /tmp/helix-install ins CVE-2000-07231.2Helix GNOME Updater helix-update 0.5 and earlier does not properly create /tmp directories, which allows local users to create empty system CVE-2000-07246.2The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, includ CVE-2000-07257.2Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by m