NVD

Id
52277  
Name
CVE-2007-0044  
Description
Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the browser to make unauthorized requests to other web sites via a URL in the (1) FDF, (2) xml, and (3) xfdf AJAX request parameters, following the # (hash) character, aka "Universal CSRF and session riding."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-01-03  
Modified Date
2011-03-07  
Seq
2007-0044  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
263983 52277 CVE-2007-0044 http://events.ccc.de/congress/2006/Fahrplan/attachments/1158-Subverting_Ajax.pdf  View
263984 52277 CVE-2007-0044 SUSE-SA:2007:011  View
263985 52277 CVE-2007-0044 oval:org.mitre.oval:def:10042  View
263986 52277 CVE-2007-0044 GLSA-200701-16  View
263987 52277 CVE-2007-0044 2090  View
263988 52277 CVE-2007-0044 1017469  View
263989 52277 CVE-2007-0044 RHSA-2008:0144  View
263990 52277 CVE-2007-0044 20070103 Adobe Acrobat Reader Plugin - Multiple Vulnerabilities  View
263991 52277 CVE-2007-0044 21858  View
263992 52277 CVE-2007-0044 ADV-2007-0032  View
263993 52277 CVE-2007-0044 http://www.wisec.it/vulns.php?page=9  View
263994 52277 CVE-2007-0044 adobe-acrobat-pdf-csrf(31266)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52440 JVNDB-2007-001132 Adobe Acrobat Reader プラグインにおける許可していないリクエストを処理してしまう脆弱性 Adobe Acrobat Reader プラグインには、FDF および xml,xfdf AJAX のリクエストパラメータの URL 処理に不備があるために、他のサイトへの認証されていないリクエストを処理してしまう脆弱性が存在します。 CVE-2007-0044 23399 CVE-2007-0044 52277 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001132.html 2007-01-03 2008-03-10 View