Vulnerabilities for Acrobat 3d (...) - CXSECURITY.COM

Vulnerabilities for 'Acrobat 3d'

2008-06-25

CVE-2008-2641

CWE-noinfo

Unspecified vulnerability in Adobe Reader and Acrobat 7.0.9 and earlier, and 8.0 through 8.1.2, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors, related to an "input validation issue in a JavaScript method."

2007-01-03

CVE-2007-0048

CWE-Other

Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, when used with Internet Explorer, Google Chrome, or Opera, allows remote attackers to cause a denial of service (memory consumption) via a long sequence of # (hash) characters appended to a PDF URL, related to a "cross-site scripting issue."

CVE-2007-0045

CWE-79

Multiple cross-site scripting (XSS) vulnerabilities in Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, for Mozilla Firefox, Microsoft Internet Explorer 6 SP1, Google Chrome, Opera 8.5.4 build 770, and Opera 9.10.8679 on Windows allow remote attackers to inject arbitrary JavaScript and conduct other attacks via a .pdf URL with a javascript: or res: URI with (1) FDF, (2) XML, and (3) XFDF AJAX parameters, or (4) an arbitrarily named name=URI anchor identifier, aka "Universal XSS (UXSS)."

CVE-2007-0044

CWE-352

Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the browser to make unauthorized requests to other web sites via a URL in the (1) FDF, (2) xml, and (3) xfdf AJAX request parameters, following the # (hash) character, aka "Universal CSRF and session riding."

>>> Vendor: Adobe 146 Products

Acrobat business tools

Digital editions

Adobe content server

Shockwave player

Flash media server

Document server

Graphics server

Livecycle form manager

Download manager

Breeze licensed server

Adobe php ria sdk

Robohelp server

Photoshop elements

Connect enterprise server

Flash media server 2

Livecycle workflow

Flash playe for linux

Flash player for linux

Flex data services

Lifecycle data services

Device central cs5

Premier pro cs4

Extension manager cs5

Extendedscript toolkit cs5

Livecycle data services

Flash player for android

Illustrator cs5.5

Photoshop cs5.5

Livecycle designer es2

Livecycle designer

Device central cs4

Acrobat r2000eader

Adobe air sdk and compiler

Photoshop cs5.1

Air sdk & compiler

Air sdk and compiler

Acrobat reader dc

Air sdk \& compiler

Experience manager

See all Products for Vendor Adobe

Copyright 2024, cxsecurity.com