CVE-2007-1377: Medium severity Netscape Navigator vulnerability
AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of service (unspecified resource consumption) via a .pdf URL with an anchor identifier that begins with search= followed by many %n sequences, a different vulnerability than CVE-2006-6027 and CVE-2006-6236.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1377?
CVE-2007-1377 is rated as a denial of service vulnerability impacting Adobe Reader 8.0 when accessed through certain browsers.
How do I fix CVE-2007-1377?
To mitigate CVE-2007-1377, users should upgrade to Adobe Reader 8.1 or later, as this version addresses the vulnerability.
Which applications are affected by CVE-2007-1377?
CVE-2007-1377 affects Adobe Reader 8.0 and specific versions of browsers like Mozilla Firefox 2.0.0.3, Netscape, and Opera 9.2.
Can CVE-2007-1377 be exploited remotely?
Yes, CVE-2007-1377 can be exploited remotely through a specially crafted PDF URL.
What type of attack does CVE-2007-1377 enable?
CVE-2007-1377 can enable a denial of service attack due to resource consumption when rendering affected PDF files.