Medium Published: Jan 03, 2007 Modified: Apr 09, 2025

CVE-2007-0048

5 CVSS SCORE

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, when used with Internet Explorer, Google Chrome, or Opera, allows remote attackers to cause a denial of service (memory consumption) via a long sequence of # (hash) characters appended to a PDF URL, related to a "cross-site scripting issue."

CVSS Vector Details

Attack Vector Network

Attack Complexity Low

Confidentiality None

Integrity None

Availability P

Affected Software Configurations

a adobe acrobat * * elements * * * * *
a adobe acrobat 7.0 * professional * * * * *
a adobe acrobat 7.0 * standard * * * * *
a adobe acrobat 7.0.1 * professional * * * * *
a adobe acrobat 7.0.1 * standard * * * * *
a adobe acrobat 7.0.2 * professional * * * * *
a adobe acrobat 7.0.2 * standard * * * * *
a adobe acrobat 7.0.3 * professional * * * * *
a adobe acrobat 7.0.3 * standard * * * * *
a adobe acrobat 7.0.4 * professional * * * * *

Weaknesses (CWE)

NVD-CWE-Other

References & External Links

External Resources

NVD Official Record Exploit-DB Search Exploits CVE Details Statistics GitHub PoC / Tools X / Twitter Discussions Google Search More

← Back to CVE Tracker