Adobe Reader Temporary Files Arbitrary File Overwrite Vulnerability (Linux)

  1. Network Vulnerabilities
  2. General
  3. Adobe Reader Temporary Files Arbitrary File Overwrite Vulnerability (Linux)
Summary
This host is installed with Adobe Reader and is prone to symlink attack vulnerability.
Impact
Successful exploitation will allow attacker to create a symbolic link from a file in the /tmp directory to an arbitrary file on the system so that the arbitrary file is overwritten once the PDF file is opened. Impact Level: System/Application
Solution
Update to Adobe Reader version 5.0.5 or later. For Updates refer http://www.adobe.com
Insight
The flaw is due to the creation of insecure temporary files when opening or printing PDF files
Affected
Adobe Reader version 4.0.5 on Linux.
Detection
Get the installed version with the help of detect NVT and check the version is vulnerable or not.
References
Updated on 2017-03-28
Severity
Low Severity
Classification
Related Vulnerabilities