XSS in Adobe Acrobat
CVE-2007-0045
Multiple cross-site scripting (XSS) vulnerabilities in Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, for Mozilla Firefox, Microsoft I…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.455 (98.7th percentile) — read the EPSS interpretation.
Affected products
- Adobe Acrobat — versions 7.0, 7.0.1, 7.0.2
- Adobe Acrobat_3d
- Adobe Acrobat_reader — versions 6.0, 6.0.1, 6.0.2
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (US Government Resource, x_refsource_CERT, third-party-advisory)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (mailing-list, Exploit, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
Frequently asked questions
- What is CVE-2007-0045?
- CVE-2007-0045 is a vulnerability in Adobe Acrobat, classified under Cross-site Scripting. Published 2007-01-03.
- Is CVE-2007-0045 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.