CVE-2007-3896

The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows remote attackers to execute arbitrary programs via invalid "%" sequences in a mailto: or other URI handler, as demonstrated using mIRC, Outlook, Firefox, Adobe...

CVE-2007-3896

Microsoft Windows XP and Server 2003 , when equipped with Internet Explorer 7 , are vulnerable to a remote code execution (RCE) flaw in Shell32.dll . The root cause is improper handling of specially crafted URLs or URIs containing invalid "%" sequences within mailto: or other URI handlers. Succes...

CVE-2007-5020

Versions of Adobe Acrobat and Adobe Reader earlier than 8.1.1 are vulnerable to remote code execution on Windows. An attacker can exploit this by providing a specially crafted PDF file containing a malicious mailto: link. This specific issue is restricted to systems running Windows XP or Windows ...

CVE-2007-5020: Improper Control of Generation of Code

Unspecified vulnerability in Adobe Acrobat and Reader 8.1 on Windows allows remote attackers to execute arbitrary code via a crafted PDF file, related to the mailto: option and Internet Explorer 7 on Windows XP. NOTE: this information is based upon a vague pre-advisory by a reliable researcher...

CVE-2007-1377

AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of service unspecified resource consumption via a .pdf URL with an anchor identifier that begins with search= followed by many %n sequences, a different vulnerability...

Design/Logic Flaw

AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of service unspecified resource consumption via a .pdf URL with an anchor identifier that begins with search= followed by many %n sequences, a different vulnerability...

CVE-2007-1377

AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of service unspecified resource consumption via a .pdf URL with an anchor identifier that begins with search= followed by many %n sequences, a different vulnerability...

CVE-2007-1377: Uncontrolled Resource Consumption

AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of service unspecified resource consumption via a .pdf URL with an anchor identifier that begins with search= followed by many %n sequences, a different vulnerability...

CVE-2007-1377

AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of service unspecified resource consumption via a .pdf URL with an anchor identifier that begins with search= followed by many %n sequences, a different vulnerability...

CVE-2007-1377

CVE-2007-1377 affects Adobe Reader's AcroPDF.DLL when loaded from browsers (e.g., Firefox/Netscape/Opera). A remote adversary can trigger a denial of service by passing a PDF URL whose anchor starts with search= followed by a long sequence of %n characters, causing resource exhaustion (DoS). This...

Adobe Reader Plugin AcroPDF.dll 8.0.0.0 - Resource Consumption

Adobe Reader Plugin AcroPDF.dll 8.0.0.0 - Resource Consumption !-------------------------------------------------------------------------------- Adobe PDF Reader plug-in AcroPDF.dll ver. 8.0.0.0 Resource Consumption author: shinnai mail: shinnaiatautisticidotorg site:...

Adobe Reader plug-in AcroPDF.dll 8.0.0.0 Resource Consumption

Exploit for unknown platform in category dos / poc ============================================================= Adobe Reader plug-in AcroPDF.dll 8.0.0.0 Resource Consumption =============================================================...

Adobe Reader Plugin 'AcroPDF.dll' 8.0.0.0 - Resource Consumption

!-------------------------------------------------------------------------------- Adobe PDF Reader plug-in AcroPDF.dll ver. 8.0.0.0 Resource Consumption author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.altervista.org Well, Adobe guys do a good job after the publication of a...

CVE-2007-1199

Adobe Reader and Acrobat Trial allow remote attackers to read arbitrary files via a file:// URI in a PDF document, as demonstrated with , a different issue than CVE-2007-0045...

Code injection

Adobe Reader and Acrobat Trial allow remote attackers to read arbitrary files via a file:// URI in a PDF document, as demonstrated with , a different issue than CVE-2007-0045...

CVE-2007-1199

Adobe Reader and Acrobat Trial allow remote attackers to read arbitrary files via a file:// URI in a PDF document, as demonstrated with , a different issue than CVE-2007-0045...

CVE-2007-1199

Adobe Reader and Acrobat Trial allow remote attackers to read arbitrary files via a file:// URI in a PDF document, as demonstrated with , a different issue than CVE-2007-0045...

CVE-2007-1199

Adobe Reader and Acrobat Trial allow remote attackers to read arbitrary files via a file:// URI in a PDF document, as demonstrated with , a different issue than CVE-2007-0045...

CVE-2007-1199: Undefined Security Weakness

Adobe Reader and Acrobat Trial allow remote attackers to read arbitrary files via a file:// URI in a PDF document, as demonstrated with , a different issue than CVE-2007-0045...

Mozilla Foundation Security Advisory 2007-02

Mozilla Foundation Security Advisory 2007-02 Title: Improvements to help protect against Cross-Site Scripting attacks Impact: Low Announced: February 23, 2007 Reporter: various Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.2 Firefox 1.5.0.10 SeaMonkey 1.0.8 Firefox 2.0.0.2 and 1.5.0.10...