CVE-2007-0044

Impact:
Moderate
Public Date:
2007-01-03
CWE:
CWE-352
Bugzilla:
223113: CVE-2007-0044 Acrobat Reader Universal CSRF and session riding

The MITRE CVE dictionary describes this issue as:

Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the browser to make unauthorized requests to other web sites via a URL in the (1) FDF, (2) xml, and (3) xfdf AJAX request parameters, following the # (hash) character, aka "Universal CSRF and session riding."

Find out more about CVE-2007-0044 from the MITRE CVE dictionary dictionary and NIST NVD.

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux AS version 4 Extras (acroread) RHSA-2008:0144 2008-02-22
Red Hat Enterprise Linux AS version 3 Extras (acroread) RHSA-2008:0144 2008-02-22
Red Hat Enterprise Linux Supplementary 5 (acroread) RHSA-2008:0144 2008-02-22

Last Modified

CVE description copyright © 2017, The MITRE Corporation

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.