|
Acrobat Reader contains a flaw that may allow a malicious user to execute arbitrary commands. The issue is triggered when Acrobat Reader tries to convert uuencoded documents into their original format. When doing so it doesn't check for backtick shell metacharacter in the filename before executing a shell command when opened. By exploiting this flaw attacker could construct a file with a name that would execute arbitrary commands resulting in a loss of integrity.
|
