CVE-2007-0048

medium
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, when used with Internet Explorer, Google Chrome, or Opera, allows remote attackers to cause a denial of service (memory consumption) via a long sequence of # (hash) characters appended to a PDF URL, related to a "cross-site scripting issue."

References

http://events.ccc.de/congress/2006/Fahrplan/attachments/1158-Subverting_Ajax.pdf

http://googlechromereleases.blogspot.com/2009/01/stable-beta-update-yahoo-mail-and.html

http://lists.suse.com/archive/suse-security-announce/2007-Jan/0012.html

http://osvdb.org/31596

http://secunia.com/advisories/23812

http://secunia.com/advisories/23882

http://secunia.com/advisories/33754

http://security.gentoo.org/glsa/glsa-200701-16.xml

http://securityreason.com/securityalert/2090

http://securitytracker.com/id?1017469

http://securitytracker.com/id?1023007

http://www.adobe.com/support/security/bulletins/apsb07-01.html

http://www.adobe.com/support/security/bulletins/apsb09-15.html

http://www.securityfocus.com/archive/1/455801/100/0/threaded

http://www.us-cert.gov/cas/techalerts/TA09-286B.html

http://www.vupen.com/english/advisories/2007/0032

http://www.vupen.com/english/advisories/2009/2898

http://www.wisec.it/vulns.php?page=9

https://exchange.xforce.ibmcloud.com/vulnerabilities/31273

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6348

Details

Source: MITRE

Published: 2007-01-03

Updated: 2018-10-16

Risk Information

CVSS v2

Base Score: 5

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Impact Score: 2.9

Exploitability Score: 10

Severity: MEDIUM

Vulnerable Software

Configuration 1

OR

cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:*:*:elements:*:*:*:*:* versions up to 7.0.8 (inclusive)

cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*

cpe:2.3:a:adobe:acrobat_3d:*:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat_reader:6.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat_reader:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat_reader:6.0.2:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat_reader:6.0.3:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat_reader:6.0.4:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat_reader:6.0.5:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*

Tenable Plugins

View all (20 total)

IDNameProductFamilySeverity
51709SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6585)NessusSuSE Local Security Checks
high
51708SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6584)NessusSuSE Local Security Checks
high
51694SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6583)NessusSuSE Local Security Checks
high
51693SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6582)NessusSuSE Local Security Checks
high
42318openSUSE 10 Security Update : acroread (acroread-6588)NessusSuSE Local Security Checks
high
42251SuSE 11 Security Update : acroread_ja (SAT Patch Number 1424)NessusSuSE Local Security Checks
high
42250SuSE 11 Security Update : Acrobat Reader (SAT Patch Number 1425)NessusSuSE Local Security Checks
high
42247openSUSE Security Update : acroread (acroread-1426)NessusSuSE Local Security Checks
high
42244openSUSE Security Update : acroread (acroread-1426)NessusSuSE Local Security Checks
high
42239GLSA-200910-03 : Adobe Reader: Multiple vulnerabilitiesNessusGentoo Local Security Checks
high
42120Adobe Reader < 9.2 / 8.1.7 / 7.1.4 Multiple Vulnerabilities (APSB09-15)NessusWindows
high
42119Adobe Acrobat < 9.2 / 8.1.7 / 7.1.4 Multiple Vulnerabilities (APSB09-15)NessusWindows
high
40798Adobe Acrobat < 6.0.6 / 7.0.9 Multiple VulnerabilitiesNessusWindows
high
4920Google Chrome < 1.0.154.46 Multiple VulnerabilitiesNessus Network MonitorWeb Clients
medium
35558Google Chrome < 1.0.154.46 Multiple VulnerabilitiesNessusWindows
medium
27144openSUSE 10 Security Update : acroread (acroread-2506)NessusSuSE Local Security Checks
high
24252GLSA-200701-16 : Adobe Acrobat Reader: Multiple vulnerabilitiesNessusGentoo Local Security Checks
high
24002Adobe Reader < 6.0.6 / 7.0.9 Multiple VulnerabilitiesNessusWindows
high
23975Adobe PDF Plug-In < 8.0 / 7.0.9 / 6.0.6 Multiple Vulnerabilities (APSB07-01)NessusWindows
high
800951Google Chrome < 1.0.154.46 Multiple VulnerabilitiesLog Correlation EngineWeb Clients
medium