NVD

Id
52278  
Name
CVE-2007-0045  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, for Mozilla Firefox, Microsoft Internet Explorer 6 SP1, Google Chrome, Opera 8.5.4 build 770, and Opera 9.10.8679 on Windows allow remote attackers to inject arbitrary JavaScript and conduct other attacks via a .pdf URL with a javascript: or res: URI with (1) FDF, (2) XML, and (3) XFDF AJAX parameters, or (4) an arbitrarily named name=URI anchor identifier, aka "Universal XSS (UXSS)."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-01-03  
Modified Date
2011-09-13  
Seq
2007-0045  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
263995 52278 CVE-2007-0045 http://googlechromereleases.blogspot.com/2009/01/stable-beta-update-yahoo-mail-and.html  View
263996 52278 CVE-2007-0045 SSRT061181  View
263997 52278 CVE-2007-0045 SUSE-SA:2007:011  View
263998 52278 CVE-2007-0045 oval:org.mitre.oval:def:6487  View
263999 52278 CVE-2007-0045 oval:org.mitre.oval:def:9693  View
264000 52278 CVE-2007-0045 GLSA-200701-16  View
264001 52278 CVE-2007-0045 2090  View
264002 52278 CVE-2007-0045 1017469  View
264003 52278 CVE-2007-0045 1023007  View
264004 52278 CVE-2007-0045 SSA:2007-066-05  View
264005 52278 CVE-2007-0045 102847  View
264006 52278 CVE-2007-0045 http://www.adobe.com/support/security/advisories/apsa07-01.html  View
264007 52278 CVE-2007-0045 http://www.adobe.com/support/security/advisories/apsa07-02.html  View
264008 52278 CVE-2007-0045 http://www.adobe.com/support/security/bulletins/apsb07-01.html  View
264009 52278 CVE-2007-0045 http://www.adobe.com/support/security/bulletins/apsb09-15.html  View
264010 52278 CVE-2007-0045 http://www.disenchant.ch/blog/hacking-with-browser-plugins/34  View
264011 52278 CVE-2007-0045 http://www.gnucitizen.org/blog/danger-danger-danger/  View
264012 52278 CVE-2007-0045 http://www.gnucitizen.org/blog/universal-pdf-xss-after-party  View
264013 52278 CVE-2007-0045 VU#815960  View
264014 52278 CVE-2007-0045 http://www.mozilla.org/security/announce/2007/mfsa2007-02.html  View
264015 52278 CVE-2007-0045 RHSA-2007:0021  View
264016 52278 CVE-2007-0045 20070103 Universal XSS with PDF files: highly dangerous  View
264017 52278 CVE-2007-0045 20070103 Re: Universal XSS with PDF files: highly dangerous  View
264018 52278 CVE-2007-0045 20070103 Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous  View
264019 52278 CVE-2007-0045 20070103 RE: [WEB SECURITY] Universal XSS with PDF files: highly dangerous  View
264020 52278 CVE-2007-0045 20070103 Adobe Acrobat Reader Plugin - Multiple Vulnerabilities  View
264021 52278 CVE-2007-0045 20070104 Universal PDF XSS After Party  View
264022 52278 CVE-2007-0045 21858  View
264023 52278 CVE-2007-0045 TA09-286B  View
264024 52278 CVE-2007-0045 ADV-2007-0032  View
264025 52278 CVE-2007-0045 ADV-2007-0957  View
264026 52278 CVE-2007-0045 ADV-2009-2898  View
264027 52278 CVE-2007-0045 http://www.wisec.it/vulns.php?page=9  View
264028 52278 CVE-2007-0045 adobe-acrobat-pdf-xss(31271)  View
264029 52278 CVE-2007-0045 RHSA-2007:0017  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51341 JVNDB-2007-000003 Adobe Acrobat Reader プラグインにおけるクロスサイトスクリプティングの脆弱性 Adobe Acrobat Reader プラグインには、特定の URL の処理に不備が存在するため、一部のウェブブラウザとの併用によりクロスサイトスクリプティング攻撃を受ける脆弱性が存在します。 CVE-2007-0045 23400 CVE-2007-0045 52278 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000003.html 2007-01-03 2009-11-02 View