CVE-2007-0044 Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the browser to make unauthorized requests to other web sites via a....
MediumCVSS 4.3
EPSS 56.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the browser to make unauthorized requests to other web sites via a URL in the (1) FDF, (2) xml, and (3) xfdf AJAX request parameters, following the # (hash) character, aka "Universal CSRF and session riding."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe acrobat | <= 7.0.8 | No fix listed |
| Adobe acrobat | = 7.0 | No fix listed |
| Adobe acrobat | = 7.0.1 | No fix listed |
| Adobe acrobat | = 7.0.2 | No fix listed |
| Adobe acrobat | = 7.0.3 | No fix listed |
| Adobe acrobat | = 7.0.4 | No fix listed |
| Adobe acrobat | = 7.0.5 | No fix listed |
| Adobe acrobat | = 7.0.6 | No fix listed |
| Adobe acrobat | = 7.0.7 | No fix listed |
| Adobe acrobat | = 7.0.8 | No fix listed |
| Adobe acrobat 3d | All versions | No fix listed |
| Adobe Acrobat Reader | <= 7.0.8 | No fix listed |
| Adobe Acrobat Reader | = 6.0 | No fix listed |
| Adobe Acrobat Reader | = 6.0.1 | No fix listed |
| Adobe Acrobat Reader | = 6.0.2 | No fix listed |
| Adobe Acrobat Reader | = 6.0.3 | No fix listed |
| Adobe Acrobat Reader | = 6.0.4 | No fix listed |
| Adobe Acrobat Reader | = 6.0.5 | No fix listed |
| Adobe Acrobat Reader | = 7.0 | No fix listed |
| Adobe Acrobat Reader | = 7.0.1 | No fix listed |
| Adobe Acrobat Reader | = 7.0.2 | No fix listed |
| Adobe Acrobat Reader | = 7.0.3 | No fix listed |
| Adobe Acrobat Reader | = 7.0.4 | No fix listed |
| Adobe Acrobat Reader | = 7.0.5 | No fix listed |
| Adobe Acrobat Reader | = 7.0.6 | No fix listed |
Show 2 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe Acrobat Reader | = 7.0.7 | No fix listed |
| Adobe Acrobat Reader | = 7.0.8 | No fix listed |
References
- events.ccc.de
- SUSE-SA:2007:011 vendor-advisory
- 23812 third-party-advisory
- 23882 third-party-advisory vendor-advisory
- 29065 third-party-advisory vendor-advisory
- GLSA-200701-16 vendor-advisory
- 2090 third-party-advisory vendor-advisory
- 1017469 vdb-entry
- RHSA-2008:0144 vendor-advisory
- 20070103 Adobe Acrobat Reader Plugin - Multiple Vulnerabilities mailing-list
- 21858 vdb-entry
- ADV-2007-0032 vdb-entry
- www.wisec.it exploit patch
- adobe-acrobat-pdf-csrf(31266) vdb-entry
- oval:org.mitre.oval:def:10042 signature vdb-entry