CVE-2007-0046
NoneCVSS
—
EPSS
55.9%
Published
Jan 3, 2007
CISA due date
—
The record
Double free vulnerability in the Adobe Acrobat Reader Plugin before 8.0.0, as used in Mozilla Firefox 1.5.0.7, allows remote attackers to execute arbitrary code by causing an error via a javascript: URI call to document.write in the (1) FDF, (2) XML, or (3) XFDF AJAX request parameters.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:rhel_extras:3 | acroread | 0 | 0:7.0.9-1.1.1.EL3 |
| Red Hat:rhel_extras:3 | acroread-libs-atk | 0 | 0:1.8.0-1.el3 |
| Red Hat:rhel_extras:3 | acroread-libs-atk-debuginfo | 0 | 0:1.8.0-1.el3 |
| Red Hat:rhel_extras:3 | acroread-libs-glib2 | 0 | 0:2.4.7-1 |
| Red Hat:rhel_extras:3 | acroread-libs-glib2-debuginfo | 0 | 0:2.4.7-1 |
| Red Hat:rhel_extras:3 | acroread-libs-gtk2 | 0 | 0:2.4.13-1.el3 |
| Red Hat:rhel_extras:3 | acroread-libs-gtk2-debuginfo | 0 | 0:2.4.13-1.el3 |
| Red Hat:rhel_extras:3 | acroread-libs-gtk2-engines | 0 | 0:2.2.0-1.el3 |
| Red Hat:rhel_extras:3 | acroread-libs-gtk2-engines-debuginfo | 0 | 0:2.2.0-1.el3 |
| Red Hat:rhel_extras:3 | acroread-libs-pango | 0 | 0:1.6.0-1.el3 |
| Red Hat:rhel_extras:3 | acroread-libs-pango-debuginfo | 0 | 0:1.6.0-1.el3 |
| Red Hat:rhel_extras:3 | acroread-plugin | 0 | 0:7.0.9-1.1.1.EL3 |
| Red Hat:rhel_extras:4 | acroread | 0 | 0:7.0.9-1.2.0.EL4 |
| Red Hat:rhel_extras:4 | acroread-plugin | 0 | 0:7.0.9-1.2.0.EL4 |
Related vulnerabilities
- CVE-2009-2994 Buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x… Also affects acroread
- CVE-2009-2983 Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4… Also affects acroread
- CVE-2009-2990 Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and… Also affects acroread
- CVE-2009-2998 Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not… Also affects acroread
- CVE-2009-3458 Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not… Also affects acroread
- CVE-2009-3459 Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before… Also affects acroread
- CVE-2009-3431 Stack consumption vulnerability in Adobe Reader and Acrobat 9.1.3, 9.1.2, 9.1.1, and… Also affects acroread
- CVE-2009-1855 Stack-based buffer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8… Also affects acroread