CVE-2007-1377

AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of service (unspecified resource consumption) via a .pdf URL with an anchor identifier that begins with search= followed by many %n sequences, a different vulnerability than CVE-2006-6027 and CVE-2006-6236.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2007-03-10

Last modified

2024-08-07

Weaknesses

CWE-400

Affected products

• Acrobat Reader (Adobe)
• Firefox (Mozilla)
• Navigator (Netscape)
• Opera Browser (Opera)

References

• http://www.securityfocus.com/bid/22856
• http://www.securityfocus.com/data/vulnerabilities/exploits/22856.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32896