CVE-2005-1306

high · 7.5

The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML External Entity vulnerability."

7.5

CVSS

14.5%

EPSS (exploit prob.)

96th

EPSS percentile

2005-06-15

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE-611

Affected products

Vendor	Product	Affected versions
adobe	acrobat	7.0
adobe	acrobat	7.0.1
adobe	acrobat_reader	7.0
adobe	acrobat_reader	7.0.1

Check a specific version with /api/v1/cve/match.

References

http://www.adobe.com/support/techdocs/331710.html
http://www.securityfocus.com/bid/13962
http://www.adobe.com/support/techdocs/331710.html
http://www.securityfocus.com/bid/13962

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2005-1306