CVE-2005-0035: Adobe Acrobat Reader

Medium severity, CVSS 5.1. EPSS: 3.2% chance of exploitation in the next 30 days.

The Acrobat web control in Adobe Acrobat and Acrobat Reader 7.0 and earlier, when used with Internet Explorer, allows remote attackers to determine the existence of arbitrary files via the LoadFile ActiveX method.

Affected products

• Adobe Acrobat Reader: version 4.5 only; version 5.0 only; version 5.0.5 only; version 5.1 only; version 6.0 only; version 6.0.1 only; …

Published 2005-05-02. Last modified 2026-06-16.