PT-2007-1540 · Microsoft+1 · Internet Explorer+2

Publicado

2007-01-03

·

Atualizado

2017-07-29

·

CVE-2007-0047

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader Plugin versions prior to 8.0.0
Description A CRLF injection issue allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the javascript: URI in the (1) FDF, (2) XML, or (3) XFDF AJAX request parameters when used with the Microsoft.XMLHTTP ActiveX object in Internet Explorer.
Recommendations For Adobe Acrobat Reader Plugin versions prior to 8.0.0, update to version 8.0.0 or later to resolve the issue.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2007-0047

Produtos afetados

Acrobat Reader Plugin
Internet Explorer
Microsoft.Xmlhttp Activex