CVE-2005-1306

Published: Jun 15, 2005Modified: Apr 16, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML External Entity vulnerability."

Affected (4)

Products: Adobe: Acrobat, Acrobat Reader

Adobe

2 products

Acrobat

Acrobat Reader

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Adobe Acrobat	Version 7.0.1
Adobe Acrobat	Version 7.0
Adobe Acrobat Reader	Version 7.0.1
Adobe Acrobat Reader	Version 7.0

Related CWEs

CWE-611

Improper Restriction of XML External Entity Reference

The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

References (4)

http://www.adobe.com/support/techdocs/331710.html

Source: cve@mitre.org

Broken LinkPatchVendor Advisory

http://www.securityfocus.com/bid/13962

Source: cve@mitre.org

Broken LinkExploitPatchThird Party AdvisoryVDB EntryVendor Advisory

http://www.adobe.com/support/techdocs/331710.html

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkPatchVendor Advisory

http://www.securityfocus.com/bid/13962

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkExploitPatchThird Party AdvisoryVDB EntryVendor Advisory

Timeline

No history available yet.