CVE-2005-2470

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 13.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-08-16 · updated 2026-06-16

Description

Buffer overflow in a "core application plug-in" for Adobe Reader 5.1 through 7.0.2 and Acrobat 5.0 through 7.0.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.

Affected products

Adobe Acrobat for Edge: 5.0, 5.0.5, 6.0, 6.0.1, 6.0.2, 7.0 (+2)
Adobe Acrobat Reader: 5.1, 6.0, 6.0.1, 6.0.2, 6.0.3, 7.0 (+2)

References

http://secunia.com/advisories/16466
http://securitytracker.com/id?1014712
http://www.adobe.com/support/techdocs/321644.html
http://www.gentoo.org/security/en/glsa/glsa-200508-11.xml
http://www.kb.cert.org/vuls/id/896220
http://www.novell.com/linux/security/advisories/2005_19_sr.html
http://www.redhat.com/support/errata/RHSA-2005-750.html
http://www.securityfocus.com/bid/14603
http://www.vupen.com/english/advisories/2005/1434
https://exchange.xforce.ibmcloud.com/vulnerabilities/21860
http://secunia.com/advisories/16466
http://securitytracker.com/id?1014712

Get alerted when CVE-2005-2470 or the next vulnerability affects your stack