Vulnerability in Adobe Acrobat Reader
CVE-2007-1199
Adobe Reader and Acrobat Trial allow remote attackers to read arbitrary files via a file:// URI in a PDF document, as demonstrated with <</URI(file:///C:/)/S/URI>>, a different issue than CVE-2007-0045.
EPSS: 0.091 (94.8th percentile) — read the EPSS interpretation.
Affected products
- Adobe Acrobat_reader — versions 4.0, 4.0.5, 4.5
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (vendor-advisory, x_refsource_GENTOO)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
Frequently asked questions
- What is CVE-2007-1199?
- CVE-2007-1199 is a vulnerability in Adobe Acrobat Reader. Published 2007-03-02.
- Is CVE-2007-1199 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.