CVE-2007-0046 Double free vulnerability in the Adobe Acrobat Reader Plugin before 8.0.0, as used in Mozilla Firefox 1.5.0.7, allows remote attackers to execute arbitrary code by causing an error via a javascript: U...
HighCVSS 7.5
EPSS 56.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Double free vulnerability in the Adobe Acrobat Reader Plugin before 8.0.0, as used in Mozilla Firefox 1.5.0.7, allows remote attackers to execute arbitrary code by causing an error via a javascript: URI call to document.write in the (1) FDF, (2) XML, or (3) XFDF AJAX request parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe Acrobat Reader | <= 7.0.8 | No fix listed |
References
- events.ccc.de
- SUSE-SA:2007:011 vendor-advisory
- 23691 third-party-advisory
- 23812 third-party-advisory
- 23877 third-party-advisory
- 23882 third-party-advisory
- 24533 third-party-advisory
- GLSA-200701-16 vendor-advisory
- 2090 third-party-advisory
- 1017469 vdb-entry
- 102847 vendor-advisory
- www.adobe.com
- RHSA-2007:0021 vendor-advisory
- 20070103 Adobe Acrobat Reader Plugin - Multiple Vulnerabilities mailing-list
- ADV-2007-0032 vdb-entry
- ADV-2007-0957 vdb-entry
- www.wisec.it exploit patch
- adobe-acrobat-msvcrt-code-execution(31272) vdb-entry
- oval:org.mitre.oval:def:9684 signature vdb-entry
- RHSA-2007:0017 vendor-advisory