CVE-2007-0048

2007-01-0321:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2007-0048

adobe acrobat reader

plugin

denial of service

pdf

url

cross-site scripting

6.2 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.777 High

EPSS

Percentile

98.2%

JSON

Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, when used with Internet Explorer, Google Chrome, or Opera, allows remote attackers to cause a denial of service (memory consumption) via a long sequence of # (hash) characters appended to a PDF URL, related to a “cross-site scripting issue.”

CPENameOperatorVersion
adobe:acrobatadobe acrobateq7.0.6
adobe:acrobat_readeradobe acrobat readereq7.0.5
adobe:acrobat_readeradobe acrobat readereq7.0.6
adobe:acrobatadobe acrobateq7.0
adobe:acrobat_readeradobe acrobat readereq7.0.8
adobe:acrobatadobe acrobateq7.0.5
adobe:acrobat_readeradobe acrobat readereq6.0.3
adobe:acrobatadobe acrobatle7.0.8
adobe:acrobat_3dadobe acrobat 3deq*
adobe:acrobat_readeradobe acrobat readereq7.0.7

CPE	Name	Operator	Version
adobe:acrobat	adobe acrobat	eq	7.0.6
adobe:acrobat_reader	adobe acrobat reader	eq	7.0.5
adobe:acrobat_reader	adobe acrobat reader	eq	7.0.6
adobe:acrobat	adobe acrobat	eq	7.0
adobe:acrobat_reader	adobe acrobat reader	eq	7.0.8
adobe:acrobat	adobe acrobat	eq	7.0.5
adobe:acrobat_reader	adobe acrobat reader	eq	6.0.3
adobe:acrobat	adobe acrobat	le	7.0.8
adobe:acrobat_3d	adobe acrobat 3d	eq	*
adobe:acrobat_reader	adobe acrobat reader	eq	7.0.7