CVE:CVE-2006-5857
CNNVD:CNNVD-200612-620
Adobe Acrobat Reader是非常流行的PDF文件阅读器。
Adobe产品在渲染特制的PDF文件时存在堆溢出漏洞，远程攻击者可能通过利用此漏洞诱骗用户打开恶意文件控制用户机器。
攻击者可以控制EIP寄存器，导致以当前用户的权限执行任意代码。
solution:Upgrade adobe acrobat to a higher version than 7.0.8,3.0,3.1,4.0,4.0.5,4.0.5a,4.0.5c,5.0,5.0.5,5.0.6,5.0.10,6.0,6.0.1,6.0.2,6.0.3,6.0.4,6.0.5,7.0,7.0.1,7.0.2,7.0.3,7.0.4,7.0.5,7.0.6,7.0.7,and avoid the version (,7.0.8],3.0,3.1,4.0,4.0.5,4.0.5a,4.0.5c,5.0,5.0.5,5.0.6,5.0.10,6.0,6.0.1,6.0.2,6.0.3,6.0.4,6.0.5,7.0,7.0.1,7.0.2,7.0.3,7.0.4,7.0.5,7.0.6,7.0.7; Upgrade adobe acrobat_reader to a higher version than 7.0.8,3.0,4.0,4.0.5,4.0.5a,4.0.5c,4.5,5.0,5.0.5,5.0.6,5.0.7,5.0.9,5.0.10,5.0.11,5.1,6.0,6.0.1,6.0.2,6.0.3,6.0.4,6.0.5,7.0,7.0.1,7.0.2,7.0.3,7.0.4,7.0.5,7.0.6,7.0.7,and avoid the version (,7.0.8],3.0,4.0,4.0.5,4.0.5a,4.0.5c,4.5,5.0,5.0.5,5.0.6,5.0.7,5.0.9,5.0.10,5.0.11,5.1,6.0,6.0.1,6.0.2,6.0.3,6.0.4,6.0.5,7.0,7.0.1,7.0.2,7.0.3,7.0.4,7.0.5,7.0.6,7.0.7