CVE-2006-6236

Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the (1) src, (2) setPageMode, (3) setLayoutMode, and (4) setNamedDest methods in an AcroPDF ActiveX control, a different set of vectors than CVE-2006-6027.

• http://research.eeye.com/html/alerts/zeroday/20061128.html
• http://secunia.com/advisories/23138Vendor Advisory
• http://www.adobe.com/support/security/advisories/apsa06-02.htmlPatch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/198908US Government Resource
• http://www.securityfocus.com/archive/1/453579/100/0/threaded
• http://www.securityfocus.com/bid/21338Patch, Vendor Advisory
• http://www.securityfocus.com/bid/21813
• http://www.vupen.com/english/advisories/2006/4751
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30574
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31167
• https://www.exploit-db.com/exploits/3040
• http://research.eeye.com/html/alerts/zeroday/20061128.html
• http://secunia.com/advisories/23138Vendor Advisory
• http://www.adobe.com/support/security/advisories/apsa06-02.htmlPatch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/198908US Government Resource
• http://www.securityfocus.com/archive/1/453579/100/0/threaded
• http://www.securityfocus.com/bid/21338Patch, Vendor Advisory
• http://www.securityfocus.com/bid/21813
• http://www.vupen.com/english/advisories/2006/4751
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30574
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31167
• https://www.exploit-db.com/exploits/3040

Published

Dec 3, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-6230SQL injection vulnerability in vuBB 0.2.1 and earlier allows…
• CVE-2006-6231vuBB 0.2.1 and earlier allows remote attackers to obtain sen…
• CVE-2006-6232PHP remote file inclusion vulnerability in admin/index.php i…
• CVE-2006-6233SQL injection vulnerability in the Downloads module for unkn…
• CVE-2006-6234Multiple SQL injection vulnerabilities in the Content module…
• CVE-2006-6235A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before …
• CVE-2006-6237SQL injection vulnerability in the decode_cookie function in…
• CVE-2006-6238The AutoFill feature in Apple Safari 2.0.4 does not properly…
• CVE-2006-6239webadmin in MailEnable NetWebAdmin Professional 2.32 and Ent…
• CVE-2006-6240Directory traversal vulnerability in Sorin Chitu Telnet-FTP …
• CVE-2006-6241Sorin Chitu Telnet-FTP Server 1.0 allows remote authenticate…
• CVE-2006-6242Multiple directory traversal vulnerabilities in Serendipity …