CVE-2004-1598: Adobe Acrobat and Acrobat Reader 6.0 allow remote attackers to read arbitrary files via a PDF file that con...

Security readout for executives and security teams

A malicious PDF could make Adobe Acrobat or Reader 6.0 read local files through an embedded Shockwave file. The business risk is unintended disclosure from endpoints that still use this obsolete software. The sources do not provide CVSS, patch status, or evidence of active exploitation. Exposure is most likely on legacy systems that still have Acrobat or Acrobat Reader 6.0 installed and open untrusted PDFs. Modern environments are usually exposed only if old PDF handling remains in kiosks, archives, lab systems, or unmanaged endpoints. Treat this as a legacy exposure cleanup issue. It is not KEV-listed in the provided bundle, but arbitrary local file read from PDFs can create confidentiality risk on unmanaged or obsolete systems. Mitigation focus: Inventory and remove Adobe Acrobat or Acrobat Reader 6.0 where found.; Check Adobe or vendor guidance for any historical fixed release or configuration advice.; Use a supported PDF reader for all untrusted documents..

Prepared

Jun 30, 2026, 00:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.