CVE-2007-0047
Last modified
CVE-2007-0047 is a vulnerability of currently unknown severity. CRLF injection vulnerability in Adobe Acrobat Reader Plugin before 8.0.0, when used with the Microsoft.XMLHTTP ActiveX object in Internet Explorer, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the javascript: URI in the (1) FDF, (2) XML, or (3) XFDF AJAX request parameters.. EPSS estimates a 8.80% chance of exploitation in the next 30 days.
Description
CRLF injection vulnerability in Adobe Acrobat Reader Plugin before 8.0.0, when used with the Microsoft.XMLHTTP ActiveX object in Internet Explorer, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the javascript: URI in the (1) FDF, (2) XML, or (3) XFDF AJAX request parameters.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Acrobat Reader | <= 7.0.8 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-0047?
How severe is CVE-2007-0047?
How do I fix CVE-2007-0047?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-0041The PE Loader service in Microsoft .NET Framework 1.0, 1.1, …
- CVE-2007-0042Interpretation conflict in ASP.NET in Microsoft .NET Framewo…
- CVE-2007-0043The Just In Time (JIT) Compiler service in Microsoft .NET Fr…
- CVE-2007-0044Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, In…
- CVE-2007-0045Multiple cross-site scripting (XSS) vulnerabilities in Adobe…
- CVE-2007-0046Double free vulnerability in the Adobe Acrobat Reader Plugin…
- CVE-2007-0048Adobe Acrobat Reader Plugin before 8.0.0, and possibly the p…
- CVE-2007-0049Geckovich TaskTracker Pro 1.5 and earlier allows remote atta…
- CVE-2007-0050PHP remote file inclusion vulnerability in index.php in Open…
- CVE-2007-0051Format string vulnerability in Apple iPhoto 6.0.5 (316), and…
- CVE-2007-0052SQL injection vulnerability in haberdetay.asp in Vizayn Habe…
- CVE-2007-0053SQL injection vulnerability in detail.asp in ASP SiteWare au…
Are you affected by CVE-2007-0047?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST