Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Vulnerability In Adobe Reader

  • Please log in to reply
2 replies to this topic

#1 fozzie


    aut viam inveniam aut faciam

  • Members
  • 3,516 posts
  • Gender:Male
  • Location:Ossendrecht/The Netherlands
  • Local time:01:52 AM

Posted 05 January 2007 - 10:26 AM

Websense® Security Labs™ has confirmed the existence of a Cross Site Scripting (XSS) vulnerability affecting multiple versions of Adobe® Acrobat Reader®. This vulnerability allows an attacker to execute JavaScript from the context of where the PDF is hosted. Any web server that hosts a PDF file is vulnerable to this XSS attack. To exploit this vulnerability, the attacker appends the desired JavaScript to any PDF href, such as a direct link or an iframe.

here is the whole article.

BC AdBot (Login to Remove)


#2 quietman7


    Bleepin' Janitor

  • Global Moderator
  • 51,771 posts
  • Gender:Male
  • Location:Virginia, USA
  • Local time:08:52 PM

Posted 05 January 2007 - 02:08 PM

Adobe Security advisory

Cross-site scripting vulnerability in versions 7.0.8 and earlier of Adobe Reader and Acrobat

Release date: January 4, 2007
Vulnerability identifier: APSA07-01
CVE number: CVE-2007-0045
Platform: Windows and Linux

Solution: Adobe Reader users should upgrade to Reader 8...

Download the latest version of Adobe Reader
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 no one

no one

  • Members
  • 843 posts
  • Gender:Male
  • Location:PCLinuxOS Land
  • Local time:07:52 PM

Posted 06 January 2007 - 06:55 PM

Security researchers are beginning to think the problem is much worse than first thought, although Adobe promises a fix by next week.

"Not everything that counts can be counted, and not everything that can be counted counts."

"Whoever fights monsters should see to it that in the process he does not become a monster"

Posted Image

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users