CVE-2007-1377

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 18.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-03-10 · updated 2026-06-16
Weakness: CWE-400

Description

AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of service (unspecified resource consumption) via a .pdf URL with an anchor identifier that begins with search= followed by many %n sequences, a different vulnerability than CVE-2006-6027 and CVE-2006-6236.

Affected products

Adobe Acrobat Reader: 8.0
Mozilla Firefox: 2.0.0.3
Netscape Navigator: all versions
Opera Browser: 9.2

References

http://www.securityfocus.com/bid/22856
http://www.securityfocus.com/data/vulnerabilities/exploits/22856.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/32896
http://www.securityfocus.com/bid/22856
http://www.securityfocus.com/data/vulnerabilities/exploits/22856.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/32896

Get alerted when CVE-2007-1377 or the next vulnerability affects your stack