Thursday, January 04, 2007

Adobe Acrobat Reader - cross-site scripting vulnerability

The vulnerability could be exploited by attackers by getting javascript executed by simply having it appended to the PDF's URL. Input passed to a hosted PDF file is not properly sanitised by the browser plug-in before being returned to users.
Systems Affected: Adobe Acrobat Reader version 7.0.8 and prior
Solution: Upgrade to Adobe Reader version 8.0.0
SOURCE: CyTRAP Labs