CVE-2007-0047

Published: Jan 3, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

CRLF injection vulnerability in Adobe Acrobat Reader Plugin before 8.0.0, when used with the Microsoft.XMLHTTP ActiveX object in Internet Explorer, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the javascript: URI in the (1) FDF, (2) XML, or (3) XFDF AJAX request parameters.

Affected (1)

Products: Adobe: Acrobat Reader

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Adobe Acrobat Reader	Up to 7.0.8

References (12)

http://events.ccc.de/congress/2006/Fahrplan/attachments/1158-Subverting_Ajax.pdf

Source: cve@mitre.org

http://lists.suse.com/archive/suse-security-announce/2007-Jan/0012.html

Source: cve@mitre.org

http://secunia.com/advisories/23882

Source: cve@mitre.org

http://securitytracker.com/id?1017469

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/0032

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/31291

Source: cve@mitre.org

http://events.ccc.de/congress/2006/Fahrplan/attachments/1158-Subverting_Ajax.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.suse.com/archive/suse-security-announce/2007-Jan/0012.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/23882

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1017469

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/0032

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/31291

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.