Description
Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, when used with Internet Explorer, Google Chrome, or Opera, allows remote attackers to cause a denial of service (memory consumption) via a long sequence of # (hash) characters appended to a PDF URL, related to a "cross-site scripting issue."
References
- TA09-286B third-party-advisory
- http://googlechromereleases.blogspot.com/2009/01/stable-beta-update-yahoo-mail-and.html
- http://events.ccc.de/congress/2006/Fahrplan/attachments/1158-Subverting_Ajax.pdf
- 1023007 vdb-entry
- 23882 third-party-advisory
- 20070103 Adobe Acrobat Reader Plugin - Multiple Vulnerabilities mailing-list
- ADV-2007-0032 vdb-entry
- http://www.adobe.com/support/security/bulletins/apsb09-15.html
- 2090 third-party-advisory
- oval:org.mitre.oval:def:6348 vdb-entry signature
- SUSE-SA:2007:011 vendor-advisory
- 33754 third-party-advisory
- 23812 third-party-advisory
- 1017469 vdb-entry
- adobe-acrobat-character-dos(31273) vdb-entry
- http://www.adobe.com/support/security/bulletins/apsb07-01.html
- ADV-2009-2898 vdb-entry
- GLSA-200701-16 vendor-advisory
- 31596 vdb-entry
- http://www.wisec.it/vulns.php?page=9