CVE-2008-4071

A certain ActiveX control in Adobe Acrobat 9, when used with Microsoft Windows Vista and Internet Explorer 7, allows remote attackers to cause a denial of service (browser crash) via an src property value with an invalid acroie:// URL.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*
OR cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*

History

21 Nov 2024, 00:50

Type Values Removed Values Added
References () http://securityreason.com/securityalert/4257 - () http://securityreason.com/securityalert/4257 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/45195 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/45195 -
References () https://www.exploit-db.com/exploits/6424 - () https://www.exploit-db.com/exploits/6424 -

Information

Published : 2008-09-15 15:14

Updated : 2024-11-21 00:50


NVD link : CVE-2008-4071

Mitre link : CVE-2008-4071

CVE.ORG link : CVE-2008-4071


JSON object : View

Products Affected

microsoft

  • windows_vista
  • internet_explorer

adobe

  • acrobat
CWE
CWE-20

Improper Input Validation

NVD-CWE-noinfo