7.5high
CVE-2005-1306in critical feed1 exploit
The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascri…
Published 21 y ago · modified 4 mo ago · JSON
CVSS
7.5
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
14.5%
percentile 97%
Public exploits
1
Exploit-DB
Summary
The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML External Entity vulnerability."
Exploit prediction (EPSS)
14.53% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.
Exploits and detections
- EDB-25822 Adobe Acrobat 7.0 / Adobe Reader 7.0 - File Existence / File Disclosure · remote · 2005-06-15
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Classification
- Weakness
- CWE-611 Improper Restriction of XML External Entity Reference
References
- securityfocus.com /bid/13962 · vdb-entry, x_refsource_BID, x_transferred
- adobe.com /support/techdocs/331710.html · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2005-1306
- NVD: CVE-2005-1306
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.