← Back

CVE-2007-0044

nvd nist
Published: Jan 3, 2007Modified: Apr 23, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the browser to make unauthorized requests to other web sites via a URL in the (1) FDF, (2) xml, and (3) xfdf AJAX request parameters, following the # (hash) character, aka "Universal CSRF and session riding."

Affected (36)

Adobe
3 products
Acrobat
Acrobat 3d
Acrobat Reader
Configuration A
36 vulnerable
Vulnerable SoftwareAffected Versions
Adobe
Acrobat
Up to 7.0.8
Acrobat
Version 7.0.1
Acrobat
Version 7.0.1
Acrobat
Version 7.0.2
Acrobat
Version 7.0.2
Acrobat
Version 7.0.3
Acrobat
Version 7.0.3
Acrobat
Version 7.0.4
Acrobat
Version 7.0.4
Acrobat
Version 7.0.5
Acrobat
Version 7.0.5
Acrobat
Version 7.0.6
Acrobat
Version 7.0.6
Acrobat
Version 7.0.7
Acrobat
Version 7.0.7
Acrobat
Version 7.0.8
Acrobat
Version 7.0.8
Acrobat
Version 7.0
Acrobat
Version 7.0
Acrobat 3d
All versions
Adobe
Acrobat Reader
Up to 7.0.8
Acrobat Reader
Version 6.0.1
Acrobat Reader
Version 6.0.2
Acrobat Reader
Version 6.0.3
Acrobat Reader
Version 6.0.4
Acrobat Reader
Version 6.0.5
Acrobat Reader
Version 6.0
Acrobat Reader
Version 7.0.1
Acrobat Reader
Version 7.0.2
Acrobat Reader
Version 7.0.3
Acrobat Reader
Version 7.0.4
Acrobat Reader
Version 7.0.5
Acrobat Reader
Version 7.0.6
Acrobat Reader
Version 7.0.7
Acrobat Reader
Version 7.0.8
Acrobat Reader
Version 7.0

Related CWEs

CWE-352
Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (30)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
ExploitPatch
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.