Thursday, January 04, 2007
The vulnerability could be exploited by attackers by getting javascript executed by simply having it appended to the PDF's URL. Input passed to a hosted PDF file is not properly sanitised by the browser plug-in before being returned to users.
Systems Affected: Adobe Acrobat Reader version 7.0.8 and prior
Solution: Upgrade to Adobe Reader version 8.0.0
SOURCE: CyTRAP Labs


<< Home