CVE-2007-0044 PUBLISHED CVSS 4.300000190734863 MEDIUM

Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the browser to make unauthorized requests to other web sites via a URL in the (1) FDF, (2) xml, and (3) xfdf AJAX request parameters, following the # (hash) character, aka "Universal CSRF and session riding."

EPSS 39.86% · 97.3th percentile

Risk Scores

CVSS v2.0
4.300000190734863
EPSS Score
39.86%
97.3th percentile

Affected Products

VendorProductVersions
n/an/an/a
adobeacrobat0, 7.0, 7.0
adobeacrobat_reader7.0.8, 0, 6.0
adobeacrobat_3d

Timeline

References

Open in Interactive Console →