CSRF in Adobe Acrobat
CVE-2007-0044
Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the browser to make unauthorized requests to other web sites via a URL in the (1) FDF, (2) xml, and (3) xf…
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.555 (98.9th percentile) — read the EPSS interpretation.
Affected products
- Adobe Acrobat — versions 7.0, 7.0.1, 7.0.2
- Adobe Acrobat_3d
- Adobe Acrobat_reader — versions 6.0, 6.0.1, 6.0.2
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (x_refsource_SREASON, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_SUSE)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
Frequently asked questions
- What is CVE-2007-0044?
- CVE-2007-0044 is a vulnerability in Adobe Acrobat, classified under Cross-Site Request Forgery (CSRF). Published 2007-01-03.
- Is CVE-2007-0044 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.