CVE-2007-1377

Medium

Description

AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of service (unspecified resource consumption) via a .pdf URL with an anchor identifier that begins with search= followed by many %n sequences, a different vulnerability than CVE-2006-6027 and CVE-2006-6236.

SeverityMedium
CVSS5.0
Exploit probability—
ProductMozilla Firefox
PublishedMar 10, 2007
First seenMar 10, 2007

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
mozilla firefox2.0.0.3—
adobe acrobat_reader8.0—
netscape navigatorNo range specified—
opera opera_browser9.2—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.