medium4.3Public exploit code
CVE-2007-1199
Adobe Reader and Acrobat Trial allow remote attackers to read arbitrary files via a file:// URI in a PDF document, as demonstrated with <</URI(file:///C:/)/S/U…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Adobe Acrobat/Adobe Reader 7.0.9 - Information Disclosure2007-02-28 · remote · windows · Verified
Impact
Adobe Reader and Acrobat Trial allow remote attackers to read arbitrary files via a file:// URI in a PDF document, as demonstrated with <</URI(file:///C:/)/S/URI>>, a different issue than CVE-2007-0045.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Acrobat Reader | Versions 4.0, 4.0.5, 4.5, 5.0, 5.0.5, 5.0.6 |
References
- NVD record
- CVE.org record
- http://osvdb.org/33897
- http://secunia.com/advisories/24408
- http://secunia.com/advisories/29205
- http://security.gentoo.org/glsa/glsa-200803-01.xml
- http://www.gnucitizen.org/projects/pdf-strikes-back/
- http://www.securityfocus.com/bid/22753
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32815
- http://osvdb.org/33897
- http://secunia.com/advisories/24408
- http://secunia.com/advisories/29205
- http://security.gentoo.org/glsa/glsa-200803-01.xml
- http://www.gnucitizen.org/projects/pdf-strikes-back/
- http://www.securityfocus.com/bid/22753
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32815