CVE-2007-5020

published 2007-09-21

CVE-2007-5020: Unspecified vulnerability in Adobe Acrobat and Reader 8.1 on Windows allows remote attackers to execute arbitrary code via a crafted PDF file, related to the…

Priority P2 68 critical 9.3 CVSS 2.0

AV N AC M Au N C C I C A C

ITW VulnCheck KEV

Unspecified vulnerability in Adobe Acrobat and Reader 8.1 on Windows allows remote attackers to execute arbitrary code via a crafted PDF file, related to the mailto: option and Internet Explorer 7 on Windows XP. NOTE: this information is based upon a vague pre-advisory by a reliable researcher.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
adobe	acrobat	—	—
adobe	acrobat_reader	—	—

Detection & IOCs extracted from sources · hover to see the quote

other mailto:↗

• → Crafted PDF file exploiting the mailto: option in Adobe Acrobat/Reader 8.1 on Windows, specifically when opened with Internet Explorer 7 on Windows XP, can lead to arbitrary code execution. ↗
• → A separate but related attack vector involves PDF files containing file:// URLs that are silently opened without user interaction; monitor for PDF-triggered file:// URL navigations. ↗

• · This vulnerability is Windows-platform specific and does not affect Adobe Acrobat Reader on Linux/UNIX platforms. ↗
• · The exploit requires the specific combination of Adobe Acrobat/Reader 8.1, Internet Explorer 7, and Windows XP to be triggered as described. ↗
• · Adobe confirmed the fix was included in Reader 9.4.1 and the 8.x release line, but the exact version that introduced the fix was not pinpointed by Adobe. ↗

CVSS provenance

nvd v2.0 9.3 CRITICAL AV:N/AC:M/Au:N/C:C/I:C/A:C

vulncheck 9.3 CRITICAL

vendor_redhat 9.3 CRITICAL

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-94