Skip to content

CVE-2005-1306 The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML External Entity vulner...

HighCVSS 7.5 EPSS 14.5% Public exploit
Published
Updated
Exploit status
Public exploit available

Description

The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML External Entity vulnerability."

Affected products

ProductAffected versionsFixed in
Adobe acrobat = 7.0 No fix listed
Adobe acrobat = 7.0.1 No fix listed
Adobe Acrobat Reader = 7.0 No fix listed
Adobe Acrobat Reader = 7.0.1 No fix listed

References

  • www.adobe.com broken-link patch vendor-advisory
  • 13962 broken-link exploit patch third-party-advisory vdb-entry vendor-advisory