Home Corporate Website Jobs Updated Mailing Lists RSS Blog  Online Shop Advertise
	Software Inspectors   Scan Online   Personal (PSI)   Network (NSI 2.0) Solutions For   Security Professionals   Security Vendors Free Solutions For   Open Communities   Journalists & Media Secunia Advisories   Search   Historic Advisories   Listed By Product   Listed By Vendor   Statistics / Graphs   Secunia Research   Report Vulnerability   About Advisories Virus Information   Chronological List   Last 10 Virus Alerts   About Virus Information Secunia Customers   Customer Area CVE Reference: CVE-2007-0045 NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. Original Page at CVE MITRE: CVE-2007-0045 Description: Multiple cross-site scripting (XSS) vulnerabilities in Adobe Acrobat Reader Plugin before 8.0.0 for Mozilla Firefox, Microsoft Internet Explorer 6 SP1, Opera 8.5.4 build 770, and Opera 9.10.8679 on Windows allow remote attackers to inject arbitrary JavaScript and conduct other attacks via a .pdf URL with a javascript: or res: URI with (1) FDF, (2) XML, and (3) XFDF AJAX parameters, or (4) an arbitrarily named name=URI anchor identifier, aka "Universal XSS (UXSS)." CVE Status: Candidate References: XF   http://xforce.iss.net/xforce/xfdb/31271 SUSE   http://lists.suse.com/archive/suse-security-announce/2007-Jan/0012.html SUNALERT   http://sunsolve.sun.com/search/document.do?assetkey=1-26-102847-1 ST   1017469 SREASON   http://securityreason.com/securityalert/2090 SLACKWARE   http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 SAID   Secunia Advisory: SA24533   Secunia Advisory: SA23882   Secunia Advisory: SA23877   Secunia Advisory: SA23812   Secunia Advisory: SA23691   Secunia Advisory: SA23483   Secunia Advisory: SA24457 REDHAT   http://www.redhat.com/support/errata/RHSA-2007-0021.html MISC   http://www.wisec.it/vulns.php?page=9   http://www.disenchant.ch/blog/hacking-with-browser-plugins/34   http://www.gnucitizen.org/blog/universal-pdf-xss-after-party   http://events.ccc.de/congress/2006/Fahrplan/attachments/1158-Subverting_Ajax.pdf HP   http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 GENTOO   http://security.gentoo.org/glsa/glsa-200701-16.xml CONFIRM   http://www.mozilla.org/security/announce/2007/mfsa2007-02.html   http://www.adobe.com/support/security/bulletins/apsb07-01.html   http://www.gnucitizen.org/blog/danger-danger-danger/   http://www.adobe.com/support/security/advisories/apsa07-01.html   http://www.adobe.com/support/security/advisories/apsa07-02.html CERT-VN   815960 BUGTRAQ   http://www.securityfocus.com/archive/1/archive/1/455906/100/0/threaded   http://www.securityfocus.com/archive/1/455790/100/0/threaded   http://www.securityfocus.com/archive/1/455831/100/0/threaded   http://www.securityfocus.com/archive/1/455800/100/0/threaded   http://www.securityfocus.com/archive/1/455836/100/0/threaded   http://www.securityfocus.com/archive/1/archive/1/455801/100/0/threaded BID   21858 Return to the previous page. Secunia PSI Scan | Patch | Track Free Download Secunia Poll Do you think it's important to read Setup/User Guides for applications for use within your network? Yes, I do it all the time Yes, but I do it rarely No See Results    Most Popular Advisories 1. OpenBSD BIND Query Port DNS Cache Poisoning 2. Red Hat update for kernel 3. Linux Kernel LDT Buffer Size Handling Vulnerability 4. Drupal Session Fixation Vulnerability 5. IPCop update for perl 6. Debian update for clamav 7. Ubuntu update for php 8. Debian update for xulrunner 9. Apple Safari Cross-Domain Cookie Injection Vulnerability 10. dnsmasq Denial of Service and DNS Cache Poisoning
Vulnerability Management - Terms & Conditions - Copyright 2002-2008 Secunia - Compliance - Contact Secunia