CVE-2002-0030: Adobe Acrobat

Medium severity, CVSS 4.6. EPSS: 0.9% chance of exploitation in the next 30 days.

The digital signature mechanism for the Adobe Acrobat PDF viewer only verifies the PE header of executable code for a plug-in, which can allow attackers to execute arbitrary code in certified mode by making the plug-in appear to be signed by Adobe.

Affected products

• Adobe Acrobat: version 4.0 only; version 4.0.5 only; version 4.0.5a only; version 4.0.5c only; version 5.0 only; version 5.0.5 only
• Adobe Acrobat Reader: version 4.0 only; version 4.0.5 only; version 4.0.5a only; version 4.0.5c only; version 5.0 only; version 5.0.5 only

Published 2003-04-02. Last modified 2026-06-16.