What is the severity of CVE-2007-1377?

CVE-2007-1377 is rated as a denial of service vulnerability impacting Adobe Reader 8.0 when accessed through certain browsers.

How do I fix CVE-2007-1377?

To mitigate CVE-2007-1377, users should upgrade to Adobe Reader 8.1 or later, as this version addresses the vulnerability.

Which applications are affected by CVE-2007-1377?

CVE-2007-1377 affects Adobe Reader 8.0 and specific versions of browsers like Mozilla Firefox 2.0.0.3, Netscape, and Opera 9.2.

Can CVE-2007-1377 be exploited remotely?

Yes, CVE-2007-1377 can be exploited remotely through a specially crafted PDF URL.

What type of attack does CVE-2007-1377 enable?

CVE-2007-1377 can enable a denial of service attack due to resource consumption when rendering affected PDF files.

Vulnerability/
CVE-2007-1377

medium

CWE

400

10/3/2007

7/8/2024

CVE-2007-1377

First published: Sat Mar 10 2007(Updated: )

AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of service (unspecified resource consumption) via a .pdf URL with an anchor identifier that begins with search= followed by many %n sequences, a different vulnerability than CVE-2006-6027 and CVE-2006-6236.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Netscape Navigator
Adobe Acrobat Reader Notification Manager	=8.0
Firefox	=2.0.0.3
Opera	=9.2

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2007-1377?
CVE-2007-1377 is rated as a denial of service vulnerability impacting Adobe Reader 8.0 when accessed through certain browsers.
How do I fix CVE-2007-1377?
To mitigate CVE-2007-1377, users should upgrade to Adobe Reader 8.1 or later, as this version addresses the vulnerability.
Which applications are affected by CVE-2007-1377?
CVE-2007-1377 affects Adobe Reader 8.0 and specific versions of browsers like Mozilla Firefox 2.0.0.3, Netscape, and Opera 9.2.
Can CVE-2007-1377 be exploited remotely?
Yes, CVE-2007-1377 can be exploited remotely through a specially crafted PDF URL.
What type of attack does CVE-2007-1377 enable?
CVE-2007-1377 can enable a denial of service attack due to resource consumption when rendering affected PDF files.

agent/type
agent/weakness
agent/author
agent/severity
agent/references
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/first-publish-date
agent/event
agent/source
agent/tags
agent/softwarecombine
collector/nvd-historical
agent/software-canonical-lookup-request
collector/nvd-index
vendor/netscape
canonical/netscape navigator
vendor/adobe
canonical/adobe acrobat reader notification manager
version/adobe acrobat reader notification manager/8.0
vendor/mozilla
canonical/firefox
version/firefox/2.0.0.3
vendor/opera
canonical/opera
version/opera/9.2

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.