CVE-2004-0632: Adobe Acrobat

High severity, CVSS 7.5. EPSS: 7.2% chance of exploitation in the next 30 days.

Adobe Reader 6.0 does not properly handle null characters when splitting a filename path into components, which allows remote attackers to execute arbitrary code via a file with a long extension that is not normally handled by Reader, triggering a buffer overflow.

Affected products

• Adobe Acrobat: version 6.0 only; version 6.0.1 only
• Adobe Acrobat Reader: version 6.0 only; version 6.0.1 only

Published 2004-07-27. Last modified 2026-06-16.