PT-2007-1539 · Mozilla+1 · Firefox+1

Published 2007-01-03 · Updated 2018-10-16 · CVE-2007-0046

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader Plugin versions prior to 8.0.0 Mozilla Firefox version 1.5.0.7

Description A double free issue allows remote attackers to execute arbitrary code by causing an error via a javascript: URI call to document.write in the FDF, XML, or XFDF AJAX request parameters.

Recommendations For Adobe Acrobat Reader Plugin versions prior to 8.0.0, update to version 8.0.0 or later. For Mozilla Firefox version 1.5.0.7, consider disabling the javascript: URI handler until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2007-0046

RHSA-2007:0017

RHSA-2007:0021

Affected Products

Acrobat Reader Plugin

Firefox

References · 22

• 🔥 https://exploit-db.com/exploits/3084 · Exploit
• 🔥 http://wisec.it/vulns.php?page=9 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-0046 · Security Note
• https://rhn.redhat.com/errata/RHSA-2007-0017.html · Vendor Advisory
• http://lists.suse.com/archive/suse-security-announce/2007-Jan/0012.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200701-16.xml · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0021.html · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102847-1 · Vendor Advisory
• http://secunia.com/advisories/23877 · Note
• http://secunia.com/advisories/23812 · Note
• http://securitytracker.com/id?1017469 · Note
• http://events.ccc.de/congress/2006/Fahrplan/attachments/1158-Subverting_Ajax.pdf · Note
• http://securityreason.com/securityalert/2090 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31272 · Note
• http://secunia.com/advisories/23691 · Note