TUCoPS :: Windows Apps

TUCoPS :: Windows Apps :: va1750.htm
Adobe Acrobat Reader Malformed PDF Code Execution Vulnerability
ZDI-08-073: Adobe Acrobat Reader Malformed PDF Code Execution Vulnerability ZDI-08-073: Adobe Acrobat Reader Malformed PDF Code Execution Vulnerability
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