CVE-2007-0046 : Detail

CVE-2007-0046

91.26%V3
Network
2007-01-03
19h00 +00:00
2018-10-16
12h57 +00:00
CVE.org
NVD
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

Double free vulnerability in the Adobe Acrobat Reader Plugin before 8.0.0, as used in Mozilla Firefox 1.5.0.7, allows remote attackers to execute arbitrary code by causing an error via a javascript: URI call to document.write in the (1) FDF, (2) XML, or (3) XFDF AJAX request parameters.

CVE Informations

Metrics

Metrics Score Severity CVSS Vector Source
V2 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P nvd@nist.gov

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
EPSS First.org

Exploit information

Exploit Database EDB-ID : 3084

Publication date : 2007-01-04 23h00 +00:00
Author : Stefano Di Paola
EDB Verified : Yes

# Stefano Di Paola # http://www.wisec.it/ From Secunia: Input passed to a hosted PDF file is not properly sanitised by the browser plug-in before being returned to users. This can be exploited to execute arbitrary script code in a user's browser session in context of an affected site. Example: - http://[host]/[filename].pdf#[some text]=javascript:[code] # milw0rm.com [2007-01-05]

Products Mentioned

Configuraton 0

Adobe>>Acrobat_reader >> Version To (including) 7.0.8

References

http://www.redhat.com/support/errata/RHSA-2007-0021.html
Tags : vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/23691
Tags : third-party-advisory, x_refsource_SECUNIA
https://rhn.redhat.com/errata/RHSA-2007-0017.html
Tags : vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/23882
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/0032
Tags : vdb-entry, x_refsource_VUPEN
http://securityreason.com/securityalert/2090
Tags : third-party-advisory, x_refsource_SREASON
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102847-1
Tags : vendor-advisory, x_refsource_SUNALERT
http://www.vupen.com/english/advisories/2007/0957
Tags : vdb-entry, x_refsource_VUPEN
http://secunia.com/advisories/23812
Tags : third-party-advisory, x_refsource_SECUNIA
http://securitytracker.com/id?1017469
Tags : vdb-entry, x_refsource_SECTRACK
http://secunia.com/advisories/23877
Tags : third-party-advisory, x_refsource_SECUNIA
http://security.gentoo.org/glsa/glsa-200701-16.xml
Tags : vendor-advisory, x_refsource_GENTOO
http://secunia.com/advisories/24533
Tags : third-party-advisory, x_refsource_SECUNIA