CVE-2007-0048 Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, when used with Internet Explorer, Google Chrome,...
MediumCVSS 5.0
EPSS 33.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, when used with Internet Explorer, Google Chrome, or Opera, allows remote attackers to cause a denial of service (memory consumption) via a long sequence of # (hash) characters appended to a PDF URL, related to a "cross-site scripting issue."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe acrobat | <= 7.0.8 | No fix listed |
| Adobe acrobat | = 7.0 | No fix listed |
| Adobe acrobat | = 7.0.1 | No fix listed |
| Adobe acrobat | = 7.0.2 | No fix listed |
| Adobe acrobat | = 7.0.3 | No fix listed |
| Adobe acrobat | = 7.0.4 | No fix listed |
| Adobe acrobat | = 7.0.5 | No fix listed |
| Adobe acrobat | = 7.0.6 | No fix listed |
| Adobe acrobat | = 7.0.7 | No fix listed |
| Adobe acrobat | = 7.0.8 | No fix listed |
| Adobe acrobat 3d | All versions | No fix listed |
| Adobe Acrobat Reader | <= 7.0.8 | No fix listed |
| Adobe Acrobat Reader | = 6.0 | No fix listed |
| Adobe Acrobat Reader | = 6.0.1 | No fix listed |
| Adobe Acrobat Reader | = 6.0.2 | No fix listed |
| Adobe Acrobat Reader | = 6.0.3 | No fix listed |
| Adobe Acrobat Reader | = 6.0.4 | No fix listed |
| Adobe Acrobat Reader | = 6.0.5 | No fix listed |
| Adobe Acrobat Reader | = 7.0 | No fix listed |
| Adobe Acrobat Reader | = 7.0.1 | No fix listed |
| Adobe Acrobat Reader | = 7.0.2 | No fix listed |
| Adobe Acrobat Reader | = 7.0.3 | No fix listed |
| Adobe Acrobat Reader | = 7.0.4 | No fix listed |
| Adobe Acrobat Reader | = 7.0.5 | No fix listed |
| Adobe Acrobat Reader | = 7.0.6 | No fix listed |
Show 2 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe Acrobat Reader | = 7.0.7 | No fix listed |
| Adobe Acrobat Reader | = 7.0.8 | No fix listed |
References
- events.ccc.de
- googlechromereleases.blogspot.com
- SUSE-SA:2007:011 vendor-advisory
- 31596 vdb-entry
- 23812 third-party-advisory
- 23882 third-party-advisory
- 33754 third-party-advisory
- GLSA-200701-16 vendor-advisory
- 2090 third-party-advisory
- 1017469 vdb-entry
- 1023007 vdb-entry
- www.adobe.com
- www.adobe.com
- 20070103 Adobe Acrobat Reader Plugin - Multiple Vulnerabilities mailing-list
- TA09-286B third-party-advisory us-government-resource
- ADV-2007-0032 vdb-entry
- ADV-2009-2898 vdb-entry
- www.wisec.it exploit patch vendor-advisory
- adobe-acrobat-character-dos(31273) vdb-entry
- oval:org.mitre.oval:def:6348 signature vdb-entry