CVE-2007-0048

medium · 5

Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, when used with Internet Explorer, Google Chrome, or Opera, allows remote attackers to cause a denial of service (memory consumption) via a long sequence of # (hash) characters appended to a PDF URL, related to a "cross-site scripting issue."

CVSS

32.6%

EPSS (exploit prob.)

98th

EPSS percentile

2007-01-03

Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

Vendor	Product	Affected versions
adobe	acrobat	<= 7.0.8
adobe	acrobat	7.0
adobe	acrobat	7.0
adobe	acrobat	7.0.1
adobe	acrobat	7.0.1
adobe	acrobat	7.0.2
adobe	acrobat	7.0.2
adobe	acrobat	7.0.3
adobe	acrobat	7.0.3
adobe	acrobat	7.0.4
adobe	acrobat	7.0.4
adobe	acrobat	7.0.5
adobe	acrobat	7.0.5
adobe	acrobat	7.0.6
adobe	acrobat	7.0.6
adobe	acrobat	7.0.7
adobe	acrobat	7.0.7
adobe	acrobat	7.0.8
adobe	acrobat	7.0.8
adobe	acrobat_3d	all versions
adobe	acrobat_reader	<= 7.0.8
adobe	acrobat_reader	6.0
adobe	acrobat_reader	6.0.1
adobe	acrobat_reader	6.0.2
adobe	acrobat_reader	6.0.3
adobe	acrobat_reader	6.0.4
adobe	acrobat_reader	6.0.5
adobe	acrobat_reader	7.0
adobe	acrobat_reader	7.0.1
adobe	acrobat_reader	7.0.2
adobe	acrobat_reader	7.0.3
adobe	acrobat_reader	7.0.4
adobe	acrobat_reader	7.0.5
adobe	acrobat_reader	7.0.6
adobe	acrobat_reader	7.0.7
adobe	acrobat_reader	7.0.8

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2007-0048