CVE-2007-0044 in Acrobat Reader Plugininfo

Summary

Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the browser to make unauthorized requests to other web sites via a URL in the (1) FDF, (2) xml, and (3) xfdf AJAX request parameters, following the # (hash) character, aka "Universal CSRF and session riding."

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Disclosure

01/03/2007

Entries

1: VDB-34227

CPE

ready

Exploit

Download

CVSS

4.3

EPSS

0.39855

Activities

Very Low

Sources

Interested in the pricing of exploits?

See the underground prices here!