CVE-2005-0918

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-05-05 · updated 2026-06-16
Weakness: CWE-203

Description

The NPSVG3.dll ActiveX control for Adobe SVG Viewer 3.02 and earlier, when running on Internet Explorer, allows remote attackers to determine the existence of arbitrary files by setting the src property to the target filename and using Javascript to determine if the web page immediately stops loading, which indicates whether the file exists or not.

Affected products

Adobe Svg Viewer: through 3.02

References

http://secunia.com/advisories/15255
http://securitytracker.com/id?1013890
http://www.adobe.com/support/techdocs/323585.html
http://www.hyperdose.com/advisories/H2005-07.txt
http://secunia.com/advisories/15255
http://securitytracker.com/id?1013890
http://www.adobe.com/support/techdocs/323585.html
http://www.hyperdose.com/advisories/H2005-07.txt

Get alerted when CVE-2005-0918 or the next vulnerability affects your stack