TUCoPS :: Windows Apps

TUCoPS :: Windows Apps :: va1749.htm
Adobe Acrobat PDF Javascript printf Stack Overflow Vulnerability
ZDI-08-072: Adobe Acrobat PDF Javascript printf Stack Overflow Vulnerability ZDI-08-072: Adobe Acrobat PDF Javascript printf Stack Overflow Vulnerability
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