CVE-2007-1377

AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of service (unspecified resource consumption) via a .pdf URL with an anchor identifier that begins with search= followed by many %n sequences, a different vulnerability than CVE-2006-6027 and CVE-2006-6236.

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

18.09% chance of exploitation in the next 30 days, 97th percentile

Published

2007-03-10

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/3430

Security advisories

• http://www.securityfocus.com/bid/22856
• http://www.securityfocus.com/data/vulnerabilities/exploits/22856.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32896

References

• CVE Record
• NVD entry