CVE-2008-4071 A certain ActiveX control in Adobe Acrobat 9, when used with Microsoft Windows Vista and Internet Explorer 7, allows remote attackers to cause a denial of service (browser crash) via an src property v...
MediumCVSS 5.0
EPSS 19.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
A certain ActiveX control in Adobe Acrobat 9, when used with Microsoft Windows Vista and Internet Explorer 7, allows remote attackers to cause a denial of service (browser crash) via an src property value with an invalid acroie:// URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe acrobat | = 9 | No fix listed |
References
- 4257 third-party-advisory
- adobe-acrobat-activex-dos(45195) vdb-entry
- 6424 exploit