CVE-2007-1199

2007-03-0221:18:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

adobe

reader

acrobat

trial

remote

file reading

pdf

uri

cve-2007-1199

nvd

6.2 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.056 Low

EPSS

Percentile

93.2%

JSON

Adobe Reader and Acrobat Trial allow remote attackers to read arbitrary files via a file:// URI in a PDF document, as demonstrated with <</URI(file:///C:/)/S/URI>>, a different issue than CVE-2007-0045.

CPENameOperatorVersion
adobe:acrobat_readeradobe acrobat readereq7.0.9
adobe:acrobat_readeradobe acrobat readereq5.0.10
adobe:acrobat_readeradobe acrobat readereq4.5
adobe:acrobat_readeradobe acrobat readereq5.0
adobe:acrobat_readeradobe acrobat readereq5.0.9
adobe:acrobat_readeradobe acrobat readereq7.0.5
adobe:acrobat_readeradobe acrobat readereq7.0.6
adobe:acrobat_readeradobe acrobat readereq4.0.5
adobe:acrobat_readeradobe acrobat readereq4.0
adobe:acrobat_readeradobe acrobat readereq7.0.8

CPE	Name	Operator	Version
adobe:acrobat_reader	adobe acrobat reader	eq	7.0.9
adobe:acrobat_reader	adobe acrobat reader	eq	5.0.10
adobe:acrobat_reader	adobe acrobat reader	eq	4.5
adobe:acrobat_reader	adobe acrobat reader	eq	5.0
adobe:acrobat_reader	adobe acrobat reader	eq	5.0.9
adobe:acrobat_reader	adobe acrobat reader	eq	7.0.5
adobe:acrobat_reader	adobe acrobat reader	eq	7.0.6
adobe:acrobat_reader	adobe acrobat reader	eq	4.0.5
adobe:acrobat_reader	adobe acrobat reader	eq	4.0
adobe:acrobat_reader	adobe acrobat reader	eq	7.0.8