CVE-2007-0048
Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7...
Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, when used with Internet Explorer, Google Chrome, or Opera, allows remote attackers to cause a denial of service (memory consumption) via a long sequence of # (hash) characters appended to a PDF URL, related to a "cross-site scripting issue."
Exploit likelihood
What each source reports
NVD Score used
Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, when used with Internet Explorer, Google Chrome, or Opera, allows remote attackers to cause a denial of service (memory consumption) via a long sequence of # (hash) characters appended to a PDF URL, related to a "cross-site scripting issue."
- Record
CVE-2007-0048- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, when used with Internet Explorer, Google Chrome, or Opera, allows remote attackers to cause a denial of service (memory consumption) via a long sequence of # (hash) characters appended to a PDF URL, related to a "cross-site scripting issue."
- Record
CVE-2007-0048- Updated
- 2026-11-02
EUVDEUVD-2007-0052 No score
Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, when used with Internet Explorer, Google Chrome, or Opera, allows remote attackers to cause a denial of service (memory consumption) via a long sequence of # (hash) characters appended to a PDF URL, related to a "cross-site scripting issue."
- Record
EUVD-2007-0052- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2v7m-vcpp-x8c4 No score
Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7...
Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, when used with Internet Explorer, Google Chrome, or Opera, allows remote attackers to cause a denial of service (memory consumption) via a long sequence of # (hash) characters appended to a PDF URL, related to a "cross-site scripting issue."
- Record
GHSA-2v7m-vcpp-x8c4- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-0048 is a medium vulnerability (CVSS 5.0) in Adobe Acrobat, published January 3, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 33.9%, the 98th percentile. No source names a fixed version.
References
us-cert.gov/cas/techalerts/TA09-286B.html
googlechromereleases.blogspot.com/2009/01/stable-beta-update-yahoo-mail-and.html
events.ccc.de/congress/2006/Fahrplan/attachments/1158-Subverting_Ajax.pdf
securitytracker.com/id?1023007
secunia.com/advisories/23882
securityfocus.com/archive/1/455801/100/0/threaded
Show 16 moreShow less
vupen.com/english/advisories/2007/0032
adobe.com/support/security/bulletins/apsb09-15.html
securityreason.com/securityalert/2090
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6348
lists.suse.com/archive/suse-security-announce/2007-Jan/0012.html
exchange.xforce.ibmcloud.com/vulnerabilities/31273
security.gentoo.org/glsa/glsa-200701-16.xml
osvdb.org/31596
wisec.it/vulns.php?page=9
nvd.nist.gov/vuln/detail/CVE-2007-0048
github.com/advisories/GHSA-2v7m-vcpp-x8c4