CVE-2005-1306

Опубликовано: 15 июн. 2005

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Средний

Описание

The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML External Entity vulnerability."

Ссылки

http://www.adobe.com/support/techdocs/331710.html
Broken Link
Patch
Vendor Advisory
http://www.securityfocus.com/bid/13962
Broken Link
Exploit
Patch
Third Party Advisory
VDB Entry
Vendor Advisory
http://www.adobe.com/support/techdocs/331710.html
Broken Link
Patch
Vendor Advisory
http://www.securityfocus.com/bid/13962
Broken Link
Exploit
Patch
Third Party Advisory
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.16058

Средний

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-611

Связанные уязвимости

GHSA-jrv6-p293-phjx