CVE-2007-0045

CVE-2007-0045 describes a set of cross-site scripting (XSS) vulnerabilities in the Adobe Acrobat Reader Plugin used with browsers on Windows, allowing remote injection of arbitrary JavaScript via a .pdf URL containing a javascript:, res:, or related AJAX parameters (FDF/XML/XFDF) or an anchor nam...

CVE-2007-0044

CVE-2007-0044 affects Adobe Acrobat Reader Plugin for Firefox/IE/Opera, with the vulnerability allowing remote attackers to induce the browser to make unauthorized requests to other sites via AJAX requests (parameters in FDF/xml/xfdf) after the hash, i.e., a cross-site request forgery (CSRF) in t...

CVE-2007-0048

CVE-2007-0048 affects Adobe Acrobat Reader/Plugin when used with Internet Explorer, Chrome, or Opera. A crafted PDF URL containing a long sequence of # characters exploits a cross-site scripting issue to trigger memory exhaustion, causing a denial of service. Affected are the Acrobat/Reader plugi...

CVE-2008-2641

Adobe Reader and Acrobat versions 7.0.9 and earlier , and 8.0 through 8.1.2 , are vulnerable to a remote code execution (RCE) flaw. The root cause is an input validation issue within a JavaScript method , specifically identified in some contexts as the Collab.collectEmailInfo() function. A remote...