Lucene search

MitreCVE-2007-0044

HistoryJan 03, 2007 - 9:28 p.m.

CVE-2007-0044

2007-01-0321:28:00

CWE-352

mitre

web.nvd.nist.gov

adobe

acrobat reader

plugin

security vulnerability

csrf

session riding

remote attack

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.2

Confidence

Low

EPSS

0.929

Percentile

99.0%

JSON

Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the browser to make unauthorized requests to other web sites via a URL in the (1) FDF, (2) xml, and (3) xfdf AJAX request parameters, following the # (hash) character, aka “Universal CSRF and session riding.”

Affected configurations

Nvd

Node

adobeacrobatRange≤7.0.8elements

adobeacrobatMatch7.0professional

adobeacrobatMatch7.0standard

adobeacrobatMatch7.0.1professional

adobeacrobatMatch7.0.1standard

adobeacrobatMatch7.0.2professional

adobeacrobatMatch7.0.2standard

adobeacrobatMatch7.0.3professional

adobeacrobatMatch7.0.3standard

adobeacrobatMatch7.0.4professional

adobeacrobatMatch7.0.4standard

adobeacrobatMatch7.0.5professional

adobeacrobatMatch7.0.5standard

adobeacrobatMatch7.0.6professional

adobeacrobatMatch7.0.6standard

adobeacrobatMatch7.0.7professional

adobeacrobatMatch7.0.7standard

adobeacrobatMatch7.0.8professional

adobeacrobatMatch7.0.8standard

adobeacrobat_3d

adobeacrobat_readerRange≤7.0.8

adobeacrobat_readerMatch6.0

adobeacrobat_readerMatch6.0.1

adobeacrobat_readerMatch6.0.2

adobeacrobat_readerMatch6.0.3

adobeacrobat_readerMatch6.0.4

adobeacrobat_readerMatch6.0.5

adobeacrobat_readerMatch7.0

adobeacrobat_readerMatch7.0.1

adobeacrobat_readerMatch7.0.2

adobeacrobat_readerMatch7.0.3

adobeacrobat_readerMatch7.0.4

adobeacrobat_readerMatch7.0.5

adobeacrobat_readerMatch7.0.6

adobeacrobat_readerMatch7.0.7

adobeacrobat_readerMatch7.0.8

VendorProductVersionCPE
adobeacrobat*cpe:2.3:a:adobe:acrobat:*:*:elements:*:*:*:*:*
adobeacrobat7.0cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*
adobeacrobat7.0cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*
adobeacrobat7.0.1cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*
adobeacrobat7.0.1cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*
adobeacrobat7.0.2cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*
adobeacrobat7.0.2cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*
adobeacrobat7.0.3cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*
adobeacrobat7.0.3cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*
adobeacrobat7.0.4cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*

Vendor	Product	Version	CPE
adobe	acrobat	*	cpe:2.3:a:adobe:acrobat:::elements:::::*
adobe	acrobat	7.0	cpe:2.3:a:adobe:acrobat:7.0::professional:::::
adobe	acrobat	7.0	cpe:2.3:a:adobe:acrobat:7.0::standard:::::
adobe	acrobat	7.0.1	cpe:2.3:a:adobe:acrobat:7.0.1::professional:::::
adobe	acrobat	7.0.1	cpe:2.3:a:adobe:acrobat:7.0.1::standard:::::
adobe	acrobat	7.0.2	cpe:2.3:a:adobe:acrobat:7.0.2::professional:::::
adobe	acrobat	7.0.2	cpe:2.3:a:adobe:acrobat:7.0.2::standard:::::
adobe	acrobat	7.0.3	cpe:2.3:a:adobe:acrobat:7.0.3::professional:::::
adobe	acrobat	7.0.3	cpe:2.3:a:adobe:acrobat:7.0.3::standard:::::
adobe	acrobat	7.0.4	cpe:2.3:a:adobe:acrobat:7.0.4::professional:::::