HTTP: Adobe Acrobat Reader Plugin URL Double Free

This signature detects attempts to exploit a known vulnerability against Adobe Acrobat Reader Plugin. The vulnerability is caused due to a memory corruption that happens inside the Plugin for multiple browsers upon processing a URL for a PDF file. A remote unauthenticated attacker can leverage the vulnerability to achieve cross-site scripting attacks.

Extended Description

Adobe Reader Plugin is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the visited site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. This issue affects Adobe Reader versions 6 and 7 for Mozilla Firefox, Opera, and Microsoft Internet Explorer. Other versions for other browsers may also be affected.

Affected Products

Mozilla firefox

References

BugTraq: 21858

CVE: CVE-2007-0046

URL: http://securitytracker.com/alerts/2007/Jan/1017469.html http://www.securityfocus.com/archive/1/archive/1/455801/100/0/threaded

Short Name

HTTP:STC:ADOBE:ACROBAT-URL-DF

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Adobe Acrobat Reader Plugin URL Double Free

Extended Description

Affected Products

References

Found a potential security threat?