CVE-2004-0629: Adobe Acrobat

High severity, CVSS 7.5. EPSS: 7.1% chance of exploitation in the next 30 days.

Buffer overflow in the ActiveX component (pdf.ocx) for Adobe Acrobat 5.0.5 and Acrobat Reader, and possibly other versions, allows remote attackers to execute arbitrary code via a URI for a PDF file with a null terminator (%00) followed by a long string.

Affected products

• Adobe Acrobat: version 5.0 only; version 5.0.5 only; version 6.0 only; version 6.0.1 only; version 6.0.2 only
• Adobe Acrobat Reader: version 5.0 only; version 5.0.5 only; version 5.1 only; version 6.0 only; version 6.0.1 only; version 6.0.2 only

Published 2004-09-28. Last modified 2026-06-16.