Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the browser to make unauthorized requests to other web sites via a URL in the (1) FDF, (2) xml, and (3) xfdf AJAX request parameters, following the # (hash) character, aka "Universal CSRF and session riding."
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2007-01-03 13:28
Updated : 2018-10-16 09:30
NVD link : CVE-2007-0044
Mitre link : CVE-2007-0044
JSON object : View
CWE
CWE-352
Cross-Site Request Forgery (CSRF)
Products Affected
adobe
- acrobat_3d
- acrobat_reader
- acrobat