high7.5Public exploit code
CVE-2005-1306
The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML sc…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Adobe Acrobat 7.0 / Adobe Reader 7.0 - File Existence / File Disclosure2005-06-15 · remote · windows · Verified
Impact
The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML External Entity vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Acrobat | Versions 7.0, 7.0.1 |
| Adobe | Acrobat Reader | Versions 7.0, 7.0.1 |