CVE-2007-5020 Unspecified vulnerability in Adobe Acrobat and Reader 8.1 on Windows allows remote attackers to execute arbitrary code via a crafted PDF file, related to the mailto: option and Internet Explorer 7 on....
HighCVSS 9.3
EPSS 20.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Adobe Acrobat and Reader 8.1 on Windows allows remote attackers to execute arbitrary code via a crafted PDF file, related to the mailto: option and Internet Explorer 7 on Windows XP. NOTE: this information is based upon a vague pre-advisory by a reliable researcher.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe acrobat | = 8.1 | No fix listed |
| Adobe Acrobat Reader | = 8.1 | No fix listed |
References
- www.adobe.com
- www.gnucitizen.org
- 20070920 0day: PDF pwns Windows mailing-list
- 25748 vdb-entry
- 1018723 vdb-entry
- TA07-297B third-party-advisory us-government-resource
- ADV-2007-3392 vdb-entry vendor-advisory
- adobe-unspecified-pdf-code-execution(36722) vdb-entry