PT-2007-1539 · Mozilla+1 · Firefox+1

Publicado 2007-01-03 · Atualizado 2018-10-16 · CVE-2007-0046

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader Plugin versions prior to 8.0.0 Mozilla Firefox version 1.5.0.7

Description A double free issue allows remote attackers to execute arbitrary code by causing an error via a javascript: URI call to document.write in the FDF, XML, or XFDF AJAX request parameters.

Recommendations For Adobe Acrobat Reader Plugin versions prior to 8.0.0, update to version 8.0.0 or later. For Mozilla Firefox version 1.5.0.7, consider disabling the javascript: URI handler until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2007-0046

RHSA-2007:0017

RHSA-2007:0021

Produtos afetados

Acrobat Reader Plugin

Firefox

Referências · 22

• 🔥 https://exploit-db.com/exploits/3084 · Exploit
• 🔥 http://wisec.it/vulns.php?page=9 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-0046 · Nota de Segurança
• https://rhn.redhat.com/errata/RHSA-2007-0017.html · Aviso do Fabricante
• http://secunia.com/advisories/23877 · Nota
• http://secunia.com/advisories/23812 · Nota
• http://securitytracker.com/id?1017469 · Nota
• http://events.ccc.de/congress/2006/Fahrplan/attachments/1158-Subverting_Ajax.pdf · Nota
• http://securityreason.com/securityalert/2090 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31272 · Nota
• http://secunia.com/advisories/23691 · Nota
• http://vupen.com/english/advisories/2007/0957 · Nota
• http://lists.suse.com/archive/suse-security-announce/2007-Jan/0012.html · Aviso do Fabricante
• http://security.gentoo.org/glsa/glsa-200701-16.xml · Aviso do Fabricante
• http://securityfocus.com/archive/1/455801/100/0/threaded · Nota