CVE-2006-5857

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 9.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-12-31 · updated 2026-06-16
Weakness: CWE-399

Description

Adobe Reader and Acrobat 7.0.8 and earlier allows user-assisted remote attackers to execute code via a crafted PDF file that triggers memory corruption and overwrites a subroutine pointer during rendering.

Affected products

Adobe Acrobat for Edge: through 7.0.8; 3.0, 3.1, 4.0, 4.0.5, 4.0.5a, 4.0.5c (+18)
Adobe Acrobat Reader: through 7.0.8; 3.0, 4.0, 4.0.5, 4.0.5a, 4.0.5c, 4.5 (+22)

References

http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0200.html
http://lists.suse.com/archive/suse-security-announce/2007-Jan/0012.html
http://osvdb.org/31316
http://secunia.com/advisories/23666
http://secunia.com/advisories/23691
http://secunia.com/advisories/23812
http://secunia.com/advisories/23877
http://secunia.com/advisories/23882
http://secunia.com/advisories/24533
http://security.gentoo.org/glsa/glsa-200701-16.xml
http://securitytracker.com/id?1017491
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102847-1

Get alerted when CVE-2006-5857 or the next vulnerability affects your stack