cbcvebase.
CVE-2007-0048
published 2007-01-03

CVE-2007-0048: Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, when…

PriorityP427medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
31.51%
98.1th percentile
Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, when used with Internet Explorer, Google Chrome, or Opera, allows remote attackers to cause a denial of service (memory consumption) via a long sequence of # (hash) characters appended to a PDF URL, related to a "cross-site scripting issue."

Affected

26 ranges· showing 25
VendorProductVersion rangeFixed in
adobeacrobat<= 7.0.8—
adobeacrobat——
adobeacrobat——
adobeacrobat——
adobeacrobat——
adobeacrobat——
adobeacrobat——
adobeacrobat——
adobeacrobat——
adobeacrobat——
adobeacrobat_reader<= 7.0.8—
adobeacrobat_reader——
adobeacrobat_reader——
adobeacrobat_reader——
adobeacrobat_reader——
adobeacrobat_reader——
adobeacrobat_reader——
adobeacrobat_reader——
adobeacrobat_reader——
adobeacrobat_reader——
adobeacrobat_reader——
adobeacrobat_reader——
adobeacrobat_reader——
adobeacrobat_reader——
adobeacrobat_reader——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.