CVE-2006-6236
Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial...
Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the (1) src, (2) setPageMode, (3) setLayoutMode, and (4) setNamedDest methods in an AcroPDF ActiveX control, a different set of vectors than CVE-2006-6027.
Exploit likelihood
What each source reports
NVD Score used
Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the (1) src, (2) setPageMode, (3) setLayoutMode, and (4) setNamedDest methods in an AcroPDF ActiveX control, a different set of vectors than CVE-2006-6027.
- Record
CVE-2006-6236- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the (1) src, (2) setPageMode, (3) setLayoutMode, and (4) setNamedDest methods in an AcroPDF ActiveX control, a different set of vectors than CVE-2006-6027.
- Record
CVE-2006-6236- Updated
- 2026-11-02
EUVDEUVD-2006-6219 No score
Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the (1) src, (2) setPageMode, (3) setLayoutMode, and (4) setNamedDest methods in an AcroPDF ActiveX control, a different set of vectors than CVE-2006-6027.
- Record
EUVD-2006-6219- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fgmp-qcpg-37v3 No score
Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial...
Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the (1) src, (2) setPageMode, (3) setLayoutMode, and (4) setNamedDest methods in an AcroPDF ActiveX control, a different set of vectors than CVE-2006-6027.
- Record
GHSA-fgmp-qcpg-37v3- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-6236 is a high vulnerability (CVSS 9.3) in Adobe Acrobat Reader, published December 3, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 21.2%, the 97th percentile. No source names a fixed version.
References
research.eeye.com/html/alerts/zeroday/20061128.html
securityfocus.com/bid/21338
vupen.com/english/advisories/2006/4751
secunia.com/advisories/23138
kb.cert.org/vuls/id/198908
Show 7 moreShow less
adobe.com/support/security/advisories/apsa06-02.html
exchange.xforce.ibmcloud.com/vulnerabilities/30574
exploit-db.com/exploits/3040
nvd.nist.gov/vuln/detail/CVE-2006-6236
github.com/advisories/GHSA-fgmp-qcpg-37v3